Netgain Enterprise Manager Vulnérabilités

Version

7.2.730 Build 1034	18
7.2.699 Build 1001	2

Contre-mesures

Official Fix	0
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	26

Exploitabilité

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	26

Vecteur d'accès

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	26

Authentification

Not Defined	0
High	0
Low	0
None	26

Interaction de l'utilisateur

Not Defined	0
Required	0
None	26

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	14
≤8	8
≤9	4
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	14
≤8	8
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	2
≤8	22
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	12
≤8	2
≤9	8
≤10	4

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	2
<2k	8
<5k	16
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	26
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (65): 1, 7.2.699 Build 1001, 7.2.730 Build 1034, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9, 10.0.11, 10.0.12, 10.0.13, 10.0.14, 10.0.15, 10.0.16, 10.0.17, 10.0.18, 10.0.19, 10.0.21, 10.0.22, 10.0.23, 10.0.24, 10.0.25, 10.0.26, 10.0.27, 10.0.28, 10.0.29, 10.0.31, 10.0.32, 10.0.33, 10.0.34, 10.0.35, 10.0.36, 10.0.37, 10.0.38, 10.0.39, 10.0.41, 10.0.42, 10.0.43, 10.0.44, 10.0.45, 10.0.46, 10.0.47, 10.0.48, 10.0.49, 10.0.51, 10.0.52, 10.0.53, 10.0.54, 10.0.55, 10.0.56, 10.1, 10.1.1, 10.1.2, 10.1.3, 10.1.4, 10.1.5, 10.1.6, 10.1.7, 10.1.8, 10.1.9, 10.1.11

Publié	Base	Temp	Vulnérabilité	0day	Aujourd'hui	Exp	Con	CTI	CVE
31/10/2018	6.7	6.4	NetGain Enterprise Manager elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-10587
31/10/2018	3.6	3.4	NetGain Enterprise Manager Stored cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-10586
23/01/2018	8.5	8.5	NetGain Enterprise Manager script_test.jsp Format String	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2017-17407
23/01/2018	8.5	8.3	NetGain Enterprise Manager RMI Registry elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Workaround	0.00	CVE-2017-17406
23/01/2018	8.5	8.5	NetGain Enterprise Manager upload_save_do.jsp elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2017-16610
23/01/2018	6.4	6.4	NetGain Enterprise Manager download.jsp divulgation de l'information	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2017-16609
23/01/2018	8.5	8.5	NetGain Enterprise Manager exec.jsp Format String	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2017-16608
23/01/2018	6.4	6.4	NetGain Enterprise Manager heapdumps.jsp divulgation de l'information	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2017-16607
23/01/2018	8.0	8.0	NetGain Enterprise Manager elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2017-16606
23/01/2018	6.9	6.9	NetGain Enterprise Manager File elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2017-16605