Approved changes feed: RSS · Atom

cpe:2.3:a:zenoss:zenoss:2.5.3:*:*:*:*:*:*:*

part: a version: 2.5.3 update: *

VendorZenoss (1687a6e3-e083-5034-ae67-6a9604bc9755)
ProductZenoss (327caa60-fc72-54a8-8fb2-6d0feb085803)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14258 vulnerable 2026-06-08 05:12:54.343753 Details available
The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988.
Published: 2019-08-21T18:33:52.000Z
Updated: 2024-08-05T00:12:43.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14257 vulnerable 2026-06-08 05:12:54.343345 Details available
pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before privileges are dropped, aka ZEN-31765.
Published: 2019-08-21T18:35:35.000Z
Updated: 2024-08-05T00:12:43.368Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.