Vulnerabilities > Opmantek > Network Management Information System

DATE CVE VULNERABILITY TITLE RISK
2017-04-10 CVE-2016-6534 Command Injection vulnerability in Opmantek Network Management Information System 4.3.6F/8.5.10G
Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script.
network
high complexity
opmantek CWE-77
7.5
2017-04-10 CVE-2016-5642 Cross-site Scripting vulnerability in Opmantek Network Management Information System 4.3.6F/8.5.10G
Opmantek NMIS before 8.5.12G has XSS via SNMP.
network
low complexity
opmantek CWE-79
5.4