GCVE - cpe:2.3:a:opsview:opsview:3.12:-:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:opsview:opsview:3.12:-:*:*:enterprise:*:*:*

part: a version: 3.12 update: -

Vendor	Opsview (`dfeae848-f94a-5e9a-921c-f6ba0691f492`)
Product	Opsview (`01f872af-ba25-544e-b94f-2cceccb40642`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-7256`	vulnerable	2026-06-08 05:05:08.827515	Details available Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Published: 2014-01-02T15:00:00.000Z Updated: 2024-09-16T20:32:30.927Z Open on db.gcve.eu Reference links http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes http://secunia.com/advisories/56096	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7255`	vulnerable	2026-06-08 05:05:08.826699	Details available Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Published: 2014-01-02T15:00:00.000Z Updated: 2024-08-06T18:01:19.735Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/89935 http://docs.opsview.com/doku.php?id=opsview4.4:changes http://secunia.com/advisories/56096	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7254`	vulnerable	2026-06-08 05:05:08.819988	Details available Cross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2014-01-02T15:00:00.000Z Updated: 2024-08-06T18:01:19.892Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/89934 http://docs.opsview.com/doku.php?id=opsview4.4:changes http://secunia.com/advisories/56096	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5695`	vulnerable	2026-06-08 05:04:53.114434	Details available Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/auditlog/, (2) PATH_INFO to info/host/ or (3) viewport/, (4) back parameter to login, or (5) "from" parameter to status/service/recheck. Published: 2013-11-05T20:00:00.000Z Updated: 2024-09-16T17:15:14.110Z Open on db.gcve.eu Reference links http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes http://archives.neohapsis.com/archives/bugtraq/2013-10/0141.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5694`	vulnerable	2026-06-08 05:04:53.109398	Details available SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands via the service_selection parameter. Published: 2013-11-05T20:00:00.000Z Updated: 2024-09-17T01:06:32.197Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/123821/Ops-View-Pre-4.4.1-Blind-SQL-Injection.html http://osvdb.org/ref/99/opsview-sqli.txt http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes http://www.exploit-db.com/exploits/29326 http://osvdb.org/99038	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.