← Back

Open Source Security Information Management

open_source_security_information_management

Vendor: Alienvault • 22 CVEs

CVEs (22)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-6056
1Alienvault
1Open Source Security Information Management
Nov 21, 2024
Jan 27, 2020
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability
CVE-2018-7279
1Alienvault
2Open Source Security Information Management
Unified Security Management
Nov 21, 2024
Mar 14, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
CVE-2015-4046
1Alienvault
1Open Source Security Information Management
May 13, 2026
May 23, 2017
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/do_scan.php.
CVE-2015-4045
1Alienvault
1Open Source Security Information Management
May 13, 2026
May 23, 2017
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
The sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 allows local users to gain privileges via a crafted nmap script.
CVE-2014-5383
1Alienvault
1Open Source Security Information Management
May 6, 2026
Aug 21, 2014
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2014-5210
1Alienvault
1Open Source Security Information Management
May 6, 2026
Aug 21, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 an...Show more
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805.Show less
CVE-2014-5159
1Alienvault
1Open Source Security Information Management
May 6, 2026
Aug 21, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter.
CVE-2014-5158
1Alienvault
1Open Source Security Information Management
May 6, 2026
Aug 21, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors.
CVE-2014-4153
1Alienvault
1Open Source Security Information Management
May 6, 2026
Jun 18, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.
CVE-2014-4152
1Alienvault
1Open Source Security Information Management
May 6, 2026
Jun 18, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an ssh public key.
CVE-2014-4151
1Alienvault
1Open Source Security Information Management
May 6, 2026
Jun 18, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted set_file request.
CVE-2014-3805
1Alienvault
1Open Source Security Information Management
May 6, 2026
Jun 13, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get_license, (2) get_log_line, or (3) update_system/upgrade_pro_web request, a differen...Show more
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get_license, (2) get_log_line, or (3) update_system/upgrade_pro_web request, a different vulnerability than CVE-2014-3804.Show less
CVE-2014-3804
1Alienvault
1Open Source Security Information Management
May 6, 2026
Jun 13, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sy...Show more
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a different vulnerability than CVE-2014-3805.Show less
CVE-2013-5967
1Alienvault
1Open Source Security Information Management
Apr 29, 2026
Oct 9, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the date_from parameter to (1) radar-i...Show more
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the date_from parameter to (1) radar-iso27001-potential.php, (2) radar-iso27001-A12IS_acquisition-pot.php, (3) radar-iso27001-A11AccessControl-pot.php, (4) radar-iso27001-A10Com_OP_Mgnt-pot.php, or (5) radar-pci-potential.php in RadarReport/.Show less
CVE-2013-5321
1Alienvault
1Open Source Security Information Management
Apr 29, 2026
Aug 20, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) sensor parameter in a Query action to fore...Show more
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) sensor parameter in a Query action to forensics/base_qry_main.php; the (2) tcp_flags[] or (3) tcp_port[0][4] parameter to forensics/base_stat_alerts.php; the (4) ip_addr[1][8] or (5) port_type parameter to forensics/base_stat_ports.php; or the (6) sortby or (7) rvalue parameter in a search action to vulnmeter/index.php.Show less
CVE-2013-5300
1Alienvault
1Open Source Security Information Management
Apr 29, 2026
Aug 15, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu paramet...Show more
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu parameter to (1) vulnmeter/index.php or (2) vulnmeter/sched.php; the (3) section parameter to av_inventory/task_edit.php; the (4) profile parameter to nfsen/rrdgraph.php; or the (5) scan_server or (6) targets parameter to vulnmeter/simulate.php.Show less
CVE-2012-3835
1Alienvault
1Open Source Security Information Management
Apr 29, 2026
Jul 3, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to top.php...Show more
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to top.php or (2) time[0][0] parameter to forensics/base_qry_main.php, which is not properly handled in an error page.Show less
CVE-2012-3834
1Alienvault
1Open Source Security Information Management
Apr 29, 2026
Jul 3, 2012
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] para...Show more
SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter.Show less
CVE-2009-4375
1Alienvault
1Open Source Security Information Management
Apr 23, 2026
Dec 21, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute...Show more
SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary SQL commands via the id_document parameter.Show less
CVE-2009-4374
1Alienvault
1Open Source Security Information Management
Apr 23, 2026
Dec 21, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Directory traversal vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to up...Show more
Directory traversal vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to upload files into arbitrary directories via a .. (dot dot) in the id_document parameter.Show less