N-able

N-central

15 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2024-8510

  • EPSS 0.39%
  • Veröffentlicht 17.03.2025 19:01:36
  • Zuletzt bearbeitet 05.09.2025 17:15:48

N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed. This vulnerability is present in all deployments of N-central prior to N-central 2024.6.

9.1

CVE-2024-5322

  • EPSS 0.41%
  • Veröffentlicht 01.07.2024 21:15:04
  • Zuletzt bearbeitet 08.09.2025 16:17:52

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3.

9.8

CVE-2024-28200

  • EPSS 1.95%
  • Veröffentlicht 01.07.2024 21:15:03
  • Zuletzt bearbeitet 21.11.2024 09:06:00

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and ...

9.8

CVE-2023-47132

  • EPSS 0.55%
  • Veröffentlicht 08.02.2024 23:15:09
  • Zuletzt bearbeitet 11.06.2025 17:15:33

An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.

7

CVE-2023-30297

  • EPSS 0.18%
  • Veröffentlicht 04.08.2023 00:15:11
  • Zuletzt bearbeitet 21.11.2024 07:59:59

An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server.