Enigma Network Management Solution

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:netsas:enigma_network_management_solution:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetsas (76838500-88ef-57c3-8f63-c041c43e90d5)
ProductEnigma Network Management Solution (a925bb14-0c31-587a-a454-c66835adc9a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-16072 vulnerable 2026-06-08 05:13:07.707397 Details available
An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ip_address variable within an snmp_browser action.
Published: 2020-03-19T23:06:42.000Z
Updated: 2024-08-05T01:03:32.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16070 vulnerable 2026-06-08 05:13:07.704078 Details available
A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through web application form inputs.
Published: 2020-03-19T17:58:11.000Z
Updated: 2024-08-05T01:03:32.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16069 vulnerable 2026-06-08 05:13:07.703548 Details available
A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through the SNMP protocol.
Published: 2020-03-19T22:58:13.000Z
Updated: 2024-08-05T01:03:32.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16068 vulnerable 2026-06-08 05:13:07.703275 Details available
A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious manage_files.cgi request. This can be triggered via XSS or an IFRAME tag included within the site.
Published: 2020-03-19T22:56:37.000Z
Updated: 2024-08-05T01:03:32.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16067 vulnerable 2026-06-08 05:13:07.702899 Details available
NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication transmitted over cleartext protocols can allow an attacker to steal username and password combinations by intercepting authentication traffic in transit.
Published: 2020-03-19T17:56:42.000Z
Updated: 2024-08-05T01:03:32.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16066 vulnerable 2026-06-08 05:13:07.702529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16065 vulnerable 2026-06-08 05:13:07.702167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16064 vulnerable 2026-06-08 05:13:07.701713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16063 vulnerable 2026-06-08 05:13:07.701246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16062 vulnerable 2026-06-08 05:13:07.700925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16061 vulnerable 2026-06-08 05:13:07.700438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.