Nozomi Networks vulnerabilities
63 CVEs and advisories name Nozomi Networks as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-40888Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0
- CVE-2025-40889Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0
- CVE-2025-40887Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
- CVE-2025-40886Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
- CVE-2025-40885Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0
- CVE-2025-3719Incorrect authorization for CLI in Guardian/CMC before 25.2.0
- CVE-2025-3718Client-side path traversal in Guardian/CMC before 25.2.0
- CVE-2025-1501Incorrect authorization for traces request/download in CMC before 25.1.0
- CVE-2024-13090Privilege escalation in Guardian/CMC before 24.6.0
- CVE-2024-13089Authenticated RCE in update functionality in Guardian/CMC before 24.6.0
- CVE-2024-4465Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0
- CVE-2023-5938Path traversal via 'zip slip' in Arc before v1.6.0
- CVE-2023-5937Sensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0
- CVE-2023-5936Unsafe temporary data privileges on Unix systems in Arc before v1.6.0
- CVE-2023-5935Missing authentication for local web interface in Arc before v1.6.0
- CVE-2024-0218DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1
- CVE-2023-6916Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1
- CVE-2023-5253Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0
- CVE-2023-32649DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
- CVE-2023-29245SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
- CVE-2023-2567Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0
- CVE-2023-23903DoS via SAML configuration in Guardian/CMC before 22.6.2
- CVE-2023-24015Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2
- CVE-2023-24471Information disclosure via the debug function in assertions in Guardian/CMC before 22.6.2
- CVE-2023-22843Stored Cross-Site Scripting (XSS) in Threat Intelligence rules in Guardian/CMC before 22.6.2
- CVE-2023-23574Authenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2
- CVE-2023-22378Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2
- CVE-2023-24477Session Fixation in Guardian/CMC before 22.6.2
- CVE-2022-4259Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2
- CVE-2022-0551Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0