Adventnet develops a focused line of network monitoring, event management, and unified communications appliances, including ManageEngine NetFlow Analyzer, EventLog Analyzer, and OpManager, that operate in intricate operational-technology environments. These products recur in disclosures centered on input-handling defects, particularly cross-site scripting vulnerabilities that arise in web-facing management interfaces, and frequently acquire public exploit tooling. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Adventnet over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-3593MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the (1) alpha parameter in | Jul 6, 2007 | 4.3 | 26 | NO | YES |
Multiple cross-site scripting (XSS) vulnerabilities in AdventNet ManageEngine OpManager 6 and 7 allow remote attackers to inject arbitrary web script or HTML via the (1) name param | Jul 6, 2007 | 2.6 | 22 | NO | YES |
CVE-2005-3522MEDIUM Cross-site scripting (XSS) vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the grDisp parameter | Nov 6, 2005 | 4.3 | 21 | NO | YES |
CVE-2007-6081HIGH AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which all | Nov 21, 2007 | 7.5 | 19 | NO | NO |
CVE-2006-2343MEDIUM Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine OpManager 6.0 allows remote attackers to inject arbitrary web script or HTML via the searchTerm parameter. NO | May 12, 2006 | 5.8 | 16 | NO | NO |
CVE-2006-3842MEDIUM Cross-site scripting (XSS) vulnerability in Zoho Virtual Office 3.2 Build 3210 allows remote attackers to execute arbitrary web script or HTML via an HTML message. | Jul 25, 2006 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Adventnet.
Media articles that mention a CVE ID that affects a product developed by Adventnet — matched by CVE ID, not by vendor name.