Design/Logic Flaw

CloudView NMS before 2.10a has XSS via a TELNET login...

Design/Logic Flaw

CloudView NMS before 2.10a has XSS via SNMP...

CVE-2016-5075

CloudView NMS (before 2.10a) is affected by a Cross-Site Scripting (XSS) vulnerability via a TELNET login. Root cause: XSS in the login flow. Impact as described: vulnerability could allow injection of script/HTML. Affected version: prior to 2.10a; fix likely in 2.10a or later (document implies u...

CVE-2016-5076

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...

CVE-2016-5075

CloudView NMS before 2.10a has XSS via a TELNET login...

CVE-2016-5073

CloudView NMS before 2.10a has XSS via SNMP...

CVE-2016-5074

CloudView NMS before 2.10a has a format string issue exploitable over SNMP...