Lucene search

K
N-ableN-central

8 matches found

CVE
CVE
•added 2024/02/08 11:15 p.m.•66 views

CVE-2023-47132

An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.

9.8CVSS9.4AI score0.00227EPSS
CVE
CVE
•added 2023/08/04 12:15 a.m.•56 views

CVE-2023-30297

An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server.

7CVSS7.1AI score0.00037EPSS
CVE
CVE
•added 2024/07/01 9:15 p.m.•47 views

CVE-2024-28200

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wi...

9.8CVSS9.5AI score0.00062EPSS
CVE
CVE
•added 2024/07/01 9:15 p.m.•42 views

CVE-2024-5322

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3.

9.1CVSS9.2AI score0.0004EPSS
CVE
CVE
•added 2025/03/17 7:15 p.m.•39 views

CVE-2024-8510

N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed. This vulnerability is present in all deployments of N-central prior to N-central 2024.6.

5.3CVSS5.3AI score0.00088EPSS
CVE
CVE
•added 2025/08/14 3:15 p.m.•19 views

CVE-2025-8875

Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.

9.4CVSS7.3AI score0.11731EPSS
In wild
CVE
CVE
•added 2025/08/14 3:15 p.m.•18 views

CVE-2025-8876

Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.

9.4CVSS7.3AI score0.23465EPSS
In wild
CVE
CVE
•added 2025/08/21 6:15 p.m.•8 views

CVE-2025-7051

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2.

8.3CVSS6.5AI score0.00043EPSS