All packages
Zenoss Core vulnerabilities
3 known CVE vulnerabilities in Zenoss Core, translated and rated.
- CVE-2014-9249High
The default configuration of Zenoss Core before version 5 allows remote attackers to read or modify database information by connecting to unspecified open ports.
- CVE-2014-6261High
Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, allowing remote attackers to execute arbitrary code by spoofing the callhome server or deploying a crafted web site visited during a login session.
- CVE-2014-6256High
Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public read or execute access via a move action.