Known vulnerabilities in Central Management Console

Vendor: NOZOMI NETWORKS
Software: Central Management Console
Software CPE: cpe:2.3:a:nozomi_networks:nozomi_cmc:*:*:*:*:*:*:*:*
Website: https://www.nozominetworks.com/
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Central Management Console Central Management Console is affected by 13 known vulnerabilities: 1 high, 7 medium, 5 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86608 - Missing Authentication for Critical Function
CVE-2023-5253		 CWE-306 Medium
No
No
 23.3.0 20.02.2024 SB2024022017
SB2024022018
#VU83221 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-29245		 CWE-89 High
No
No
 22.6.3, 23.1.0 16.11.2023 SB2023111610
SB2023111615
#VU83220 - Improper input validation
CVE-2023-32649		 CWE-20 Medium
No
No
 22.6.3, 23.1.0 16.11.2023 SB2023111610
SB2023111615
#VU83218 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-2567		 CWE-89 Medium
No
No
 22.6.3, 23.1.0 16.11.2023 SB2023111610
SB2023111615
#VU81938 - Session Fixation
CVE-2023-24477		 CWE-384 Medium
No
No
 22.6.2 12.10.2023 SB2023101204
SB2023101205
#VU81937 - Incorrect Authorization
CVE-2023-24471		 CWE-863 Medium
No
No
 22.6.2 12.10.2023 SB2023101204
SB2023101205
#VU81936 - Improper input validation
CVE-2023-24015		 CWE-20 Low
No
No
 22.6.2 12.10.2023 SB2023101204
SB2023101205
#VU81934 - Improper input validation
CVE-2023-23903		 CWE-20 Low
No
No
 22.6.2 12.10.2023 SB2023101204
SB2023101205
#VU81933 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-23574		 CWE-89 Medium
No
No
 22.6.2 12.10.2023 SB2023101204
SB2023101205
#VU81932 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22843		 CWE-79 Low
No
No
 22.6.2 12.10.2023 SB2023101204
SB2023101205
#VU81931 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-22378		 CWE-89 Medium
No
No
 22.6.2 12.10.2023 SB2023101204
SB2023101205
#VU50925 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-26724		 CWE-78 Low
No
No
 19.0.12, 20.0.7.4 24.02.2021 SB2021022414
#VU50924 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-26725		 CWE-22 Low
No
No
 19.0.12, 20.0.7.4 24.02.2021 SB2021022414