All packages
ZOHO WebNMS Framework 5.2 and 5.2 SP1 vulnerabilities
3 known CVE vulnerabilities in ZOHO WebNMS Framework 5.2 and 5.2 SP1, translated and rated.
- CVE-2016-6603Critical
ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.
- CVE-2016-6602Critical
ZOHO WebNMS Framework versions 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, allowing attackers to obtain cleartext passwords by accessing WEB-INF/conf/securitydbData.xml.
- CVE-2016-6600Critical
Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. (dot dot) in the fileName parameter.