CVE-2017-16599: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16598: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to execute code by overwriting arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed...

CVE-2017-16592: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific...

CVE-2017-16609: Path Traversal: 'C:dirname'

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within download.jsp. The issue results from the lack of proper validation ...

CVE-2017-16591: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific...

CVE-2017-16607: Exposure of Sensitive Information to an Unauthorized Actor

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within heapdumps.jsp. The issue results from the lack of proper validation...

CVE-2017-17407: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager v7.2.699 build 1001. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the content parameter provided ...

CVE-2017-16601: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16608: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a...

NetGain Enterprise Manager File Upload Vulnerability

Netgain Enterprise Manager is a suite of IT asset monitoring and management software from NetGain Systems, Singapore. A remote code execution vulnerability exists in the org.apache.jsp.u.jsp.db.save005fimagejsp servlet in NetGain Enterprise Manager, which originates from a process that fails to...

CVE-2017-16602: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

NetGain Enterprise Manager Arbitrary File Deletion Vulnerability

Netgain Enterprise Manager is a suite of IT asset monitoring and management software from NetGain Systems, Singapore. A directory traversal vulnerability exists in the org.apache.jsp.u.jsp.reports.templates.misc.samplejsp servlet in NetGain Enterprise Manager, which originates from a process that...

NetGain Systems Enterprise Manager Directory Traversal Vulnerability (CNVD-2018-01234)

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Systems Enterprise Manager suffers from a directory traversal vulnerability in its implementation, which can be exploited by an attacker to access or read arbitrary files...

NetGain Systems Enterprise Manager Directory Traversal Vulnerability (CNVD-2018-01235)

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Systems Enterprise Manager suffers from a directory traversal vulnerability in its implementation, which can be exploited by an attacker to access or read arbitrary files...

NetGain Systems Enterprise Manager exec_jsp Command Execution (CVE-2017-16602)

A command execution vulnerability exists in NetGain Systems Enterprise Manager. The vulnerability is due improper validation of command HTTP parameter. A remote, authenticated attacker can exploit this vulnerability by sending crafted requests to a vulnerable server...

NetGain Enterprise Manager Command Injection Vulnerability

Netgain Enterprise Manager is a suite of IT asset monitoring and management software from NetGain Systems, Singapore. A command injection vulnerability exists in the org.apache.jsp.u.jsp.tools.execjsp servlet in NetGain Enterprise Manager, which originates from a process that fails to properly...

NetGain Enterprise Manager Arbitrary File Download Vulnerability

Netgain Enterprise Manager is a suite of IT asset monitoring and management software from NetGain Systems, Singapore. An arbitrary file download vulnerability exists in the download.jsp file in Netgain Enterprise Manager, which occurs when the program fails to properly detect a user-submitted...

NetGain Enterprise Manager Authentication Bypass Vulnerability

Netgain Enterprise Manager is a suite of IT asset monitoring and management software from NetGain Systems, Singapore. An authentication bypass vulnerability exists in the MainFilter servlet in NetGain Enterprise Manager, where the program fails to match strings correctly. A remote attacker could...

NetGain Systems Enterprise Manager Directory Traversal Vulnerability (CNVD-2018-01236)

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Systems Enterprise Manager suffers from a directory traversal vulnerability in its implementation, which can be exploited by an attacker to access or read arbitrary files...

NetGain Systems Enterprise Manager Directory Traversal Vulnerability (CNVD-2018-01228)

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Systems Enterprise Manager suffers from a directory traversal vulnerability in its implementation, which can be exploited by an attacker to access or read arbitrary files...