Known vulnerabilities in NetFlow Analyzer

Vendor: Zoho Corporation
Software: NetFlow Analyzer
Software CPE: cpe:2.3:a:zohocorp:netflow_analyzer:*:*:*:*:*:*:*:*
Website: https://www.zohocorp.com/index.html
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NetFlow Analyzer NetFlow Analyzer is affected by 7 known vulnerabilities: 1 high, 5 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU19028 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 12.4.029 - Build 124029 08.07.2019 SB2019060608
#VU19027 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 Medium
No
No
 12.4.029 - Build 124029 08.07.2019 SB2019060608
#VU19025 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12196		 CWE-89 Medium
No
No
 12.4.029 - Build 124029 08.07.2019 SB2019060608
#VU19024 - Improper Access Control
 CWE-284 Medium
No
No
 12.4.050 - Build 124050 08.07.2019 SB2019070803
#VU19023 - Deserialization of Untrusted Data
 CWE-502 Medium
No
No
 12.4.050 - Build 124050 08.07.2019 SB2019070803
#VU19022 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 Medium
No
No
 12.4.050 - Build 124050 08.07.2019 SB2019070803
#VU41005 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-9373		 CWE-22 High
No
No
 - 16.12.2014 SB2014121606