Open Source Security Information And Event Management
Vendor:
First CVE: Sep 26, 2016 · Active for 9 years
5
Total CVEs
More Total CVEs than 79% of tracked products
5.0
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
7.4
Avg CVSS
Higher Avg CVSS than 52% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Open Source Security Information And Event Management over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 26, 2016
9 years ago
Most Recent CVE
Oct 28, 2016
3,560 days ago
CVE Severity & Scoring
Open Source Security Information And Event Management5 CVEs
60%
40%
All CVEs353,240 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local0 (0.0%)
Network5 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (40.0%)
Unknown0 (0.0%)
Required3 (60.0%)
Privileges Required
Low1 (20.0%)
High0 (0.0%)
None4 (80.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-8582CRITICAL A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read loc | Oct 28, 2016 | 9.8 | 74 | NO | YES |
CVE-2016-8581MEDIUM A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal session IDs of logged | Oct 28, 2016 | 6.1 | 49 | NO | YES |
CVE-2016-8580CRITICAL PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic met | Oct 28, 2016 | 9.8 | 39 | NO | YES |
CVE-2016-6913MEDIUM Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to | Sep 26, 2016 | 5.4 | 20 | NO | NO |
CVE-2016-8583MEDIUM Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to reflected XSS. | Oct 28, 2016 | 6.1 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (5 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
2 CVEs
40.0% of CVEs· 98th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
3 CVEs
60.0% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (5 CVEs).
Media Mentions
Signals from CVEs in this product scope (5 CVEs).
Top CNAs Publishing CVEs For Open Source Security Information And Event Management
Top CWEs
Versions
No cataloged versions.