cmc vulnerabilities

2 known vulnerabilities in cmc from Nozominetworks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  CMC: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-4259May 4, 2023Nozomi Networks

  Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.

• 7.2 High severity

  Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and…

  CVE-2022-0551Mar 24, 2022Nozomi Networks

  Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue