| CVE-2025-40888 |
A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter
|
6.0
Moyenne
|
7 oct. 2025 |
| CVE-2025-40889 |
A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input…
|
7.2
Élevée
|
7 oct. 2025 |
| CVE-2025-40887 |
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter
|
6.0
Moyenne
|
7 oct. 2025 |
| CVE-2025-40886 |
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter
|
7.7
Élevée
|
7 oct. 2025 |
| CVE-2025-40885 |
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input…
|
6.0
Moyenne
|
7 oct. 2025 |
| CVE-2025-3719 |
An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being…
|
7.2
Élevée
|
7 oct. 2025 |
| CVE-2025-3718 |
A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing…
|
5.8
Moyenne
|
7 oct. 2025 |
| CVE-2024-13090 |
A privilege escalation vulnerability may enable a service account to elevate its privileges
|
7.3
Élevée
|
10 juin 2025 |
| CVE-2024-13089 |
An OS command injection vulnerability within the update functionality may allow an authenticated administrator to…
|
7.5
Élevée
|
10 juin 2025 |
| CVE-2024-4465 |
An access control vulnerability was discovered in the Reports section due to a specific access restriction not being…
|
6.0
Moyenne
|
11 sept. 2024 |
| CVE-2024-0218 |
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain…
|
7.5
Élevée
|
10 avr. 2024 |
| CVE-2023-6916 |
Audit records for OpenAPI requests may include sensitive information
|
7.2
Élevée
|
10 avr. 2024 |
| CVE-2023-5253 |
A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks…
|
5.3
Moyenne
|
15 janv. 2024 |
| CVE-2023-32649 |
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain…
|
7.5
Élevée
|
19 sept. 2023 |
| CVE-2023-29245 |
A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields…
|
8.1
Élevée
|
19 sept. 2023 |
| CVE-2023-2567 |
A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in…
|
8.8
Élevée
|
19 sept. 2023 |
| CVE-2023-23903 |
An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not…
|
4.9
Moyenne
|
9 août 2023 |
| CVE-2023-24015 |
A partial DoS vulnerability has been detected in the Reports section, exploitable by a malicious authenticated user…
|
4.3
Moyenne
|
9 août 2023 |
| CVE-2023-24471 |
An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being…
|
6.5
Moyenne
|
9 août 2023 |
| CVE-2023-22843 |
An authenticated attacker with administrative access to the web management interface can inject malicious JavaScript…
|
6.4
Moyenne
|
9 août 2023 |
| CVE-2023-23574 |
A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the…
|
8.8
Élevée
|
9 août 2023 |
| CVE-2023-22378 |
A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting…
|
8.8
Élevée
|
9 août 2023 |
| CVE-2023-24477 |
In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before…
|
7.0
Élevée
|
9 août 2023 |
| CVE-2022-4259 |
Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and…
|
8.8
Élevée
|
4 mai 2023 |
| CVE-2022-0551 |
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an…
|
7.2
Élevée
|
24 mars 2022 |