Show filters
146 Total Results
Displaying 11-20 of 146
Sort by:
Attacker Value
Unknown

CVE-2023-40055

Disclosure Date: November 09, 2023 (last updated November 18, 2023)
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges. We found this issue was not resolved in CVE-2023-33227
Attacker Value
Unknown

CVE-2023-40054

Disclosure Date: November 09, 2023 (last updated November 18, 2023)
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges. We found this issue was not resolved in CVE-2023-33226
Attacker Value
Unknown

CVE-2023-33228

Disclosure Date: November 01, 2023 (last updated November 10, 2023)
The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information.
Attacker Value
Unknown

CVE-2023-33227

Disclosure Date: November 01, 2023 (last updated November 10, 2023)
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to perform the actions with SYSTEM privileges.
Attacker Value
Unknown

CVE-2023-33226

Disclosure Date: November 01, 2023 (last updated November 10, 2023)
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges.
Attacker Value
Unknown

CVE-2023-39447

Disclosure Date: October 10, 2023 (last updated October 17, 2023)
When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in restnoded log.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Attacker Value
Unknown

CVE-2023-29505

Disclosure Date: August 04, 2023 (last updated October 08, 2023)
An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking.
Attacker Value
Unknown

CVE-2021-35226

Disclosure Date: October 10, 2022 (last updated October 08, 2023)
An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and require authenticated access with an NCM role.
Attacker Value
Unknown

CVE-2021-39190

Disclosure Date: September 22, 2022 (last updated October 08, 2023)
The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM (version 1802) to GLPI. In versions prior to 2.3.0, the Configuration page is publicly accessible in read-only mode. This issue is patched in version 2.3.0. No known workarounds exist.
Attacker Value
Unknown

CVE-2022-37972

Disclosure Date: September 20, 2022 (last updated January 11, 2025)
Microsoft Endpoint Configuration Manager Spoofing Vulnerability