Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

4 vulnerabilities found for Opsview Core by Opsview

CVE-2013-3935 (GCVE-0-2013-3935)

Vulnerability from cvelistv5 – Published: 2020-01-02 14:31 – Updated: 2024-08-06 16:22
VLAI
Summary
Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors.
Severity
No CVSS data available.
CWE
  • Cross-Site Request Forgery
Assigner
References
Impacted products
Date Public
2013-10-02 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:22:01.472Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Opsview",
          "vendor": "Opsview",
          "versions": [
            {
              "status": "affected",
              "version": "before 4.4.1"
            }
          ]
        },
        {
          "product": "Opsview Core",
          "vendor": "Opsview",
          "versions": [
            {
              "status": "affected",
              "version": "before 20130522"
            }
          ]
        }
      ],
      "datePublic": "2013-10-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-Site Request Forgery",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-02T14:31:52.000Z",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2013-3935",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Opsview",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 4.4.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Opsview Core",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 20130522"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Opsview"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cross-Site Request Forgery"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes",
              "refsource": "MISC",
              "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
            },
            {
              "name": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822",
              "refsource": "MISC",
              "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2013-3935",
    "datePublished": "2020-01-02T14:31:52.000Z",
    "dateReserved": "2013-06-04T00:00:00.000Z",
    "dateUpdated": "2024-08-06T16:22:01.472Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-3936 (GCVE-0-2013-3936)

Vulnerability from cvelistv5 – Published: 2020-01-02 14:31 – Updated: 2024-08-06 16:30
VLAI
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML.
Severity
No CVSS data available.
CWE
  • Cross-Site Scripting
Assigner
References
Impacted products
Date Public
2013-10-02 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:30:48.701Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Opsview",
          "vendor": "Opsview",
          "versions": [
            {
              "status": "affected",
              "version": "before 4.4.1"
            }
          ]
        },
        {
          "product": "Opsview Core",
          "vendor": "Opsview",
          "versions": [
            {
              "status": "affected",
              "version": "before 20130522"
            }
          ]
        }
      ],
      "datePublic": "2013-10-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-Site Scripting",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-02T14:31:49.000Z",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2013-3936",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Opsview",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 4.4.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Opsview Core",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 20130522"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Opsview"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cross-Site Scripting"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes",
              "refsource": "MISC",
              "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
            },
            {
              "name": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822",
              "refsource": "MISC",
              "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2013-3936",
    "datePublished": "2020-01-02T14:31:49.000Z",
    "dateReserved": "2013-06-04T00:00:00.000Z",
    "dateUpdated": "2024-08-06T16:30:48.701Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-3935 (GCVE-0-2013-3935)

Vulnerability from nvd – Published: 2020-01-02 14:31 – Updated: 2024-08-06 16:22
VLAI
Summary
Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors.
Severity
No CVSS data available.
CWE
  • Cross-Site Request Forgery
Assigner
References
Impacted products
Date Public
2013-10-02 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:22:01.472Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Opsview",
          "vendor": "Opsview",
          "versions": [
            {
              "status": "affected",
              "version": "before 4.4.1"
            }
          ]
        },
        {
          "product": "Opsview Core",
          "vendor": "Opsview",
          "versions": [
            {
              "status": "affected",
              "version": "before 20130522"
            }
          ]
        }
      ],
      "datePublic": "2013-10-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-Site Request Forgery",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-02T14:31:52.000Z",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2013-3935",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Opsview",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 4.4.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Opsview Core",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 20130522"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Opsview"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cross-Site Request Forgery"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes",
              "refsource": "MISC",
              "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
            },
            {
              "name": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822",
              "refsource": "MISC",
              "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2013-3935",
    "datePublished": "2020-01-02T14:31:52.000Z",
    "dateReserved": "2013-06-04T00:00:00.000Z",
    "dateUpdated": "2024-08-06T16:22:01.472Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-3936 (GCVE-0-2013-3936)

Vulnerability from nvd – Published: 2020-01-02 14:31 – Updated: 2024-08-06 16:30
VLAI
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML.
Severity
No CVSS data available.
CWE
  • Cross-Site Scripting
Assigner
References
Impacted products
Date Public
2013-10-02 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:30:48.701Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Opsview",
          "vendor": "Opsview",
          "versions": [
            {
              "status": "affected",
              "version": "before 4.4.1"
            }
          ]
        },
        {
          "product": "Opsview Core",
          "vendor": "Opsview",
          "versions": [
            {
              "status": "affected",
              "version": "before 20130522"
            }
          ]
        }
      ],
      "datePublic": "2013-10-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-Site Scripting",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-02T14:31:49.000Z",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2013-3936",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Opsview",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 4.4.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Opsview Core",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 20130522"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Opsview"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cross-Site Scripting"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes",
              "refsource": "MISC",
              "url": "http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes"
            },
            {
              "name": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822",
              "refsource": "MISC",
              "url": "http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2013-3936",
    "datePublished": "2020-01-02T14:31:49.000Z",
    "dateReserved": "2013-06-04T00:00:00.000Z",
    "dateUpdated": "2024-08-06T16:30:48.701Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}