GCVE - cpe:2.3:a:opsview:opsview:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:opsview:opsview:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Opsview (`dfeae848-f94a-5e9a-921c-f6ba0691f492`)
Product	Opsview (`01f872af-ba25-544e-b94f-2cceccb40642`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-16148`	vulnerable	2026-06-08 05:11:04.284329	Details available The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting. Published: 2018-09-05T21:00:00.000Z Updated: 2024-08-05T10:17:38.353Z Open on db.gcve.eu Reference links https://knowledge.opsview.com/v5.4/docs/whats-new https://seclists.org/fulldisclosure/2018/Sep/3 https://www.coresecurity.com/advisories/opsview-monitor-multiple-vulnerabilities https://knowledge.opsview.com/v5.3/docs/whats-new	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16147`	vulnerable	2026-06-08 05:11:04.283887	Details available The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting. Published: 2018-09-05T21:00:00.000Z Updated: 2024-08-05T10:17:37.631Z Open on db.gcve.eu Reference links https://knowledge.opsview.com/v5.4/docs/whats-new https://seclists.org/fulldisclosure/2018/Sep/3 https://www.coresecurity.com/advisories/opsview-monitor-multiple-vulnerabilities https://knowledge.opsview.com/v5.3/docs/whats-new	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16146`	vulnerable	2026-06-08 05:11:04.283461	Details available The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test notifications that are triggered under certain configurable events. The value parameter is not properly sanitized, leading to arbitrary command injection with the privileges of the nagios user account. Published: 2018-09-05T21:00:00.000Z Updated: 2024-08-05T10:17:37.835Z Open on db.gcve.eu Reference links https://knowledge.opsview.com/v5.4/docs/whats-new https://seclists.org/fulldisclosure/2018/Sep/3 https://www.coresecurity.com/advisories/opsview-monitor-multiple-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16145`	vulnerable	2026-06-08 05:11:04.283014	Details available The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited by the nagios user, and would allow attackers to elevate their privileges to root after a system restart, hence obtaining full control of the appliance. Published: 2018-09-05T21:00:00.000Z Updated: 2024-08-05T10:17:38.184Z Open on db.gcve.eu Reference links https://knowledge.opsview.com/v5.4/docs/whats-new https://seclists.org/fulldisclosure/2018/Sep/3 https://www.coresecurity.com/advisories/opsview-monitor-multiple-vulnerabilities https://knowledge.opsview.com/v5.3/docs/whats-new	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16144`	vulnerable	2026-06-08 05:11:04.282380	Details available The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command injection due to improper sanitization of the rancid_password parameter. Published: 2018-09-05T21:00:00.000Z Updated: 2024-08-05T10:17:37.656Z Open on db.gcve.eu Reference links https://knowledge.opsview.com/v5.4/docs/whats-new https://seclists.org/fulldisclosure/2018/Sep/3 https://www.coresecurity.com/advisories/opsview-monitor-multiple-vulnerabilities https://knowledge.opsview.com/v5.3/docs/whats-new	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6035`	vulnerable	2026-06-08 05:06:51.192751	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-4420`	vulnerable	2026-06-08 05:06:39.824579	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7256`	vulnerable	2026-06-08 05:05:08.827304	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7255`	vulnerable	2026-06-08 05:05:08.826470	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7254`	vulnerable	2026-06-08 05:05:08.813447	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3936`	vulnerable	2026-06-08 05:04:33.221907	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3935`	vulnerable	2026-06-08 05:04:33.220743	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.