CVE-2016-5073

CloudView NMS (before 2.10a) is reported vulnerable to Cross‑Site Scripting (XSS) via SNMP. The CNVD entry confirms a remote attacker can inject arbitrary script/HTML through SNMP, with impact limited to the web interface’s confidentiality/ integrity, and requires no authentication due to SNMP ex...

CVE-2016-5075

CloudView NMS (before 2.10a) is affected by a Cross-Site Scripting (XSS) vulnerability via a TELNET login. Root cause: XSS in the login flow. Impact as described: vulnerability could allow injection of script/HTML. Affected version: prior to 2.10a; fix likely in 2.10a or later (document implies u...