Approved changes feed: RSS · Atom

cpe:2.3:a:netsweeper:netsweeper:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetsweeper (cfc65a91-8664-5cdf-8161-6a979e672db7)
ProductNetsweeper (07b254d2-4b43-5112-9ea8-684e94118ce2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13167 vulnerable 2026-06-08 05:18:00.295281 Details available
Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters.
Published: 2020-05-19T19:29:41.000Z
Updated: 2024-08-04T12:11:19.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9619 vulnerable 2026-06-08 05:06:12.217533 Details available
Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to execute arbitrary PHP code by uploading a file with a double extension, then accessing it via a direct request to the file in webadmin/deny/images/, as demonstrated by secuid0.php.gif.
Published: 2017-09-19T15:00:00.000Z
Updated: 2024-08-06T13:47:41.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9618 vulnerable 2026-06-08 05:06:12.216993 Details available
The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.
Published: 2017-09-19T15:00:00.000Z
Updated: 2024-08-06T13:47:41.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9617 vulnerable 2026-06-08 05:06:12.216655 Details available
Open redirect vulnerability in remotereporter/load_logfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
Published: 2020-02-19T20:02:46.000Z
Updated: 2024-08-06T13:47:41.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9616 vulnerable 2026-06-08 05:06:12.216201 Details available
Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to obtain sensitive information by making a request that redirects to the deny page.
Published: 2017-09-19T15:00:00.000Z
Updated: 2024-08-06T13:47:41.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9614 vulnerable 2026-06-08 05:06:12.215607 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9613 vulnerable 2026-06-08 05:06:12.215336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9612 vulnerable 2026-06-08 05:06:12.215054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9611 vulnerable 2026-06-08 05:06:12.214736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9610 vulnerable 2026-06-08 05:06:12.208545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9609 vulnerable 2026-06-08 05:06:12.208196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9608 vulnerable 2026-06-08 05:06:12.207874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9606 vulnerable 2026-06-08 05:06:12.205211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9605 vulnerable 2026-06-08 05:06:12.204788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3859 vulnerable 2026-06-08 05:02:14.030180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2447 vulnerable 2026-06-08 05:02:04.534877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2446 vulnerable 2026-06-08 05:02:04.534494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.