Nozominetworks

Guardian

37 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2025-40896

  • EPSS 0.02%
  • Veröffentlicht 04.03.2026 13:52:52
  • Zuletzt bearbeitet 05.03.2026 18:48:12

The server certificate was not verified when an Arc agent connected to a Guardian or CMC. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Arc agent and the Guardian or CMC. This could result i...

5.4

CVE-2025-40894

  • EPSS 0.03%
  • Veröffentlicht 04.03.2026 13:51:14
  • Zuletzt bearbeitet 05.03.2026 18:52:25

A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper validation on an input parameter. A malicious authenticated user with the required privileges could edit a node label to inject HTML ...

8.1

CVE-2025-40898

  • EPSS 0.12%
  • Veröffentlicht 18.12.2025 13:19:22
  • Zuletzt bearbeitet 06.01.2026 20:08:13

A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient validation of the input file. An authenticated user with limited privileges, by uploading a specifically-crafted Arc data archive, can pote...

6.1

CVE-2025-40893

  • EPSS 0.05%
  • Veröffentlicht 18.12.2025 13:17:54
  • Zuletzt bearbeitet 06.01.2026 20:08:45

A Stored HTML Injection vulnerability was discovered in the Asset List functionality due to improper validation of network traffic data. An unauthenticated attacker can send specially crafted network packets to inject HTML tags into asset attributes....

8.9

CVE-2025-40892

  • EPSS 0.05%
  • Veröffentlicht 18.12.2025 13:16:25
  • Zuletzt bearbeitet 06.01.2026 20:10:01

A Stored Cross-Site Scripting vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing a JavaScript payload, or a...

4.7

CVE-2025-40891

  • EPSS 0.04%
  • Veröffentlicht 18.12.2025 13:14:35
  • Zuletzt bearbeitet 06.01.2026 20:11:26

A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data. An unauthenticated attacker can send specially crafted network packets at two different times to ...

7.9

CVE-2025-40890

  • EPSS 0.05%
  • Veröffentlicht 25.11.2025 15:30:34
  • Zuletzt bearbeitet 25.11.2025 22:16:16

A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated low-privilege user can craft a malicious dashboard containing a JavaScript payload and sh...

6.5

CVE-2025-40888

  • EPSS 0.02%
  • Veröffentlicht 07.10.2025 12:38:39
  • Zuletzt bearbeitet 09.10.2025 16:37:58

A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application,...

8.1

CVE-2025-40889

  • EPSS 0.08%
  • Veröffentlicht 07.10.2025 12:37:58
  • Zuletzt bearbeitet 09.10.2025 16:37:35

A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters. An authenticated user with limited privileges, by issuing a specifically-crafted request, can potentially alter the str...

6.5

CVE-2025-40887

  • EPSS 0.02%
  • Veröffentlicht 07.10.2025 12:37:10
  • Zuletzt bearbeitet 09.10.2025 16:38:07

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web applicatio...