GCVE - cpe:2.3:a:mutiny:mutiny:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mutiny:mutiny:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mutiny (`6df09d03-48f8-5b33-81e8-a14edc754bb0`)
Product	Mutiny (`9e7ef7d3-6957-5baf-a40b-7e5266814852`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-37832`	vulnerable	2026-06-08 05:47:13.094258	Details available Mutiny 7.2.0-10788 suffers from Hardcoded root password. Published: 2022-12-16T00:00:00.000Z Updated: 2025-04-18T13:23:01.159Z Open on db.gcve.eu Reference links https://labs.jumpsec.com/advisory-cve-2022-37832-mutiny-network-monitoring-appliance-hardcoded-credentials/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15529`	vulnerable	2026-06-08 05:10:55.065316	Details available A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenticated users, with access to the admin interface, to inject arbitrary commands within the filename of a system upgrade upload. Published: 2018-08-28T17:00:00.000Z Updated: 2024-08-05T09:54:03.513Z Open on db.gcve.eu Reference links https://doddsecurity.com/135/remote-command-execution-on-the-monitoring-appliances/ https://github.com/doddr/Security-Advisories/tree/master/Mutiny/CVE-2018-15529 http://packetstormsecurity.com/files/149065/Mutiny-Monitoring-Appliance-Command-Injection.html https://www.mutiny.com/mutiny-support/release-summary/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0136`	vulnerable	2026-06-08 05:03:01.798449	Details available Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service (file deletion or renaming) via (1) the uploadPath parameter in an UPLOAD operation; the paths[] parameter in a (2) DELETE, (3) CUT, or (4) COPY operation; or the newPath parameter in a (5) CUT or (6) COPY operation. Published: 2013-06-01T10:00:00.000Z Updated: 2024-09-17T02:48:04.090Z Open on db.gcve.eu Reference links https://community.rapid7.com/community/metasploit/blog/2013/05/15/new-1day-exploits-mutiny-vulnerabilities http://www.kb.cert.org/vuls/id/701572	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.