GCVE - cpe:2.3:a:zenoss:zenoss_core:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:zenoss:zenoss_core:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Zenoss (`1687a6e3-e083-5034-ae67-6a9604bc9755`)
Product	Zenoss Core (`0ed17fb5-d570-5936-a592-560cc5ad2ce5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-9386`	vulnerable	2026-06-08 05:06:11.573913	Details available Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote attackers to hijack sessions by leveraging an unattended workstation, aka ZEN-12691. Published: 2014-12-15T17:27:00.000Z Updated: 2024-08-06T13:40:24.989Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/449452 https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9249`	vulnerable	2026-06-08 05:06:11.226923	Details available The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408. Published: 2014-12-15T17:27:00.000Z Updated: 2024-08-06T13:40:24.559Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/449452 https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-6262`	vulnerable	2026-06-08 05:05:56.925450	Details available Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted third argument to the rrdtool.graph function, aka ZEN-15415, a related issue to CVE-2013-2131. Published: 2020-02-12T01:30:20.000Z Updated: 2024-08-06T12:10:13.222Z Open on db.gcve.eu Reference links https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing http://www.kb.cert.org/vuls/id/449452 https://www.securityfocus.com/bid/71540 https://github.com/oetiker/rrdtool-1.x/pull/532 https://github.com/oetiker/rrdtool-1.x/commit/64ed5314af1255ab6dded45f70b39cdeab5ae2ec	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-6255`	vulnerable	2026-06-08 05:05:56.919377	Details available Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the came_from parameter, aka ZEN-11998. Published: 2014-12-15T17:27:00.000Z Updated: 2024-08-06T12:10:12.872Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/449452 https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.