CVE-2017-16600

NetGain Systems Enterprise Manager 7.2.730 build 1034 is affected by CVE-2017-16600 due to a directory traversal in the org.apache.jsp.u.jsp.reports.templates.network.traffic_005freport_jsp servlet. The flaw occurs when parsing the filename parameter, which is used for file operations without pro...

CVE-2017-16601

NetGain Systems Enterprise Manager 7.2.730 build 1034 is affected by CVE-2017-16601. The vulnerability resides in the org.apache.jsp.u.jsp.reports.templates.service.service_005ffailures_jsp servlet (listening by default on TCP 8081) and stems from improper validation of a user-supplied filename p...

CVE-2017-16602

The NetGain Systems Enterprise Manager (specifically version 7.2.730 build 1034 ) is vulnerable to a command injection flaw in the org.apache.jsp.u.jsp.tools.exec_jsp servlet. The root cause is the failure to properly validate a user-supplied string before it is used to execute a system call duri...

CVE-2017-16603

CVE-2017-16603 affects NetGain Systems Enterprise Manager 7.2.730 build 1034. The flaw is in the org.apache.jsp.u.jsp.settings.upload_005ffile_005fdo_jsp servlet (port 8081 by default) where filename parameter handling fails to properly validate user-supplied data, allowing an attacker to upload ...

CVE-2017-16604

NetGain Systems Enterprise Manager 7.2.730 build 1034 is affected by a directory-traversal vulnerability in the servlet org.apache.jsp.u.jsp.cnnic.asset.deviceReport.deviceReport_005fexport_005fdo_jsp. The flaw occurs when parsing the filename parameter, allowing an attacker to overwrite arbitrar...

CVE-2017-16605

Summary: CVE-2017-16605 affects NetGain Systems Enterprise Manager 7.2.730 build 1034. The vulnerability is in the org.apache.jsp.u.jsp.db.save_005fattrs_jsp servlet (listening on port 8081 by default) and arises from improper validation of a user-supplied path in the id parameter, enabling a dir...

CVE-2017-16606

NetGain Systems Enterprise Manager 7.2.730 build 1034 is affected by CVE-2017-16606. The flaw is in the servlet org.apache.jsp.u.jsp._3d.add_005f3d_005fview_005fdo_jsp, which listens on TCP port 8081 by default. During parsing of the filename parameter, the application does not properly validate ...

CVE-2017-17407

NetGain Systems Enterprise Manager v7.2.699 build 1001 is affected by a remote code execution vulnerability in the script_test.jsp endpoint, where a crafted content parameter can cause a system call execution using a user-supplied string. No authentication is required, enabling attackers to run c...

CVE-2017-16595

The CVE-2017-16595 entry concerns NetGain Systems Enterprise Manager. Affected component: org.apache.jsp.u.jsp.reports.export_jsp servlet (default port 8081). Root cause: improper validation of a user-supplied filename path during file operations in the reports export download functionality, enab...

CVE-2017-16595

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific...

CVE-2017-16591

NetGain Systems Enterprise Manager vulnerability CVE-2017-16591 involves the restore.download_005fdo_jsp servlet. The flaw arises when parsing the filename parameter, where user-supplied paths are not properly validated before file operations, enabling directory traversal. This affects installati...

CVE-2017-16596

NetGain Systems Enterprise Manager 7.2.730 build 1034 is affected by CVE-2017-16596 due to a directory traversal/ improper validation flaw in the org.apache.jsp.u.jsp.designer.script_005fsamples_jsp servlet, which runs on port 8081 by default. Parsing the type parameter allows an attacker to use ...

CVE-2017-16593

CVE-2017-16593 affects NetGain Systems Enterprise Manager 7.2.730 build 1034. A flaw in the org.apache.jsp.u.jsp.restore.del_005fdo_jsp servlet (listening on port 8081 by default) fails to validate a user-supplied path when handling the filenames parameter, allowing a remote attacker to delete ar...

CVE-2017-16594

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16598

This vulnerability allows remote attackers to execute code by overwriting arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed...

CVE-2017-16594

NetGain Systems Enterprise Manager 7.2.730 build 1034 is affected by CVE-2017-16594. The flaw resides in the org.apache.jsp.u.jsp.db.save_005fimage_jsp servlet, which listens on TCP port 8081 by default. Improper validation of the id parameter enables an unauthenticated (though some sources say a...

CVE-2017-16590

CVE-2017-16590 affects NetGain Systems Enterprise Manager 7.2.699 build 1001. The vulnerability is in the MainFilter servlet where doFilter uses improper string matching, enabling an authentication bypass. It is a remote issue that requires user interaction to exploit and can allow an attacker to...

CVE-2017-16594: Unrestricted Upload of File with Dangerous Type

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16590: Authentication Bypass by Alternate Name

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001. User interaction is required to exploit this vulnerability. The specific flaw exists within the MainFilter servlet. The issue results from the...

CVE-2017-16593: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...