Enigma Network Management Solution
Vendor:
First CVE: Mar 19, 2020 · Active for 6 years
11
Total CVEs
More Total CVEs than 90% of tracked products
11.0
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
8.0
Avg CVSS
Higher Avg CVSS than 72% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Enigma Network Management Solution over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 19, 2020
6 years ago
Most Recent CVE
Mar 20, 2020
2,321 days ago
CVE Severity & Scoring
Enigma Network Management Solution11 CVEs
27%
55%
18%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network11 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low11 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None8 (72.7%)
Unknown0 (0.0%)
Required3 (27.3%)
Privileges Required
Low5 (45.5%)
High0 (0.0%)
None6 (54.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-16072CRITICAL An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper n | Mar 20, 2020 | 9.8 | 63 | NO | YES |
CVE-2019-16065HIGH A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execute SQL commands to expose and compromise | Mar 19, 2020 | 8.8 | 38 | NO | YES |
CVE-2019-16068HIGH A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious manage_files.cgi req | Mar 19, 2020 | 8.8 | 37 | NO | YES |
CVE-2019-16064CRITICAL NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user to access files and directories stored outside of the web r | Mar 19, 2020 | 9.6 | 29 | NO | NO |
CVE-2019-16066HIGH An unrestricted file upload vulnerability exists in user and system file upload functions in NETSAS Enigma NMS 65.0.0 and prior. This allows an attacker to upload malicious files a | Mar 19, 2020 | 8.8 | 27 | NO | NO |
CVE-2019-16061HIGH A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing any low privileged user with access to t | Mar 19, 2020 | 8.8 | 25 | NO | NO |
CVE-2019-16067HIGH NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication transmitted over clea | Mar 19, 2020 | 7.5 | 24 | NO | NO |
CVE-2019-16063HIGH NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an attacker to expose unencrypted sensitive data. | Mar 19, 2020 | 7.5 | 23 | NO | NO |
CVE-2019-16069MEDIUM A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directl | Mar 19, 2020 | 6.1 | 21 | NO | NO |
CVE-2019-16070MEDIUM A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directl | Mar 19, 2020 | 6.1 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
9.1% of CVEs· 97th percentile
ExploitDB
3 CVEs
27.3% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Enigma Network Management Solution
Top CWEs
Versions
No cataloged versions.