Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Nfsen

First CVE: Mar 22, 2017Active for: 9 yearsTotal CVEs: 4

Nfsen is a network-flow analysis and visualization tool deployed in monitoring and security operations environments, where its exposure centers on a single product with a durable signal of command-injection and privilege-handling flaws. The recurring weakness classes—OS command injection, improper privilege checking, and injection into downstream components—reflect risks inherent to a system that parses and processes untrusted network data and invokes external tools, a pattern that defenders should monitor closely when the tool operates on untrusted or internet-sourced flow data. Current severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
4
Total CVEs
More Total CVEs than 79% of tracked vendors
4.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 95% of tracked vendors
9.2
Avg CVSS Score
Higher Avg CVSS Score than 88% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Nfsen over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 22, 2017
9 years ago
Most Recent CVE
Jul 10, 2017
3,300 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (4 CVEs).

4 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2017-6972CRITICAL
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945
Mar 22, 20179.850NOYES
CVE-2017-6971HIGH
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via
Mar 22, 20178.846NOYES
CVE-2017-7175CRITICAL
NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Custom output format" field).
Jul 10, 20179.943NOYES
CVE-2017-6970HIGH
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-1048
Mar 22, 20178.435NOYES
View all 4 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products4 CVEs
50%
50%
Severity distribution among all CVEs352,101 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local1 (25.0%)
Network3 (75.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None4 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low2 (50.0%)
High0 (0.0%)
None2 (50.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (4 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
100.0% of CVEs· 85th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Nfsen.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Nfsen — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Nfsen's Products

View all 1 CNAs →

Top CWEs