Vulnerabilities > Zenoss > High

DATE CVE VULNERABILITY TITLE RISK
2019-08-21 CVE-2019-14257 Permissions, Privileges, and Access Controls vulnerability in Zenoss 2.5.3
pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before privileges are dropped, aka ZEN-31765.
local
low complexity
zenoss CWE-264
7.2
2014-12-15 CVE-2014-9249 Permissions, Privileges, and Access Controls vulnerability in Zenoss Core
The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408.
network
low complexity
zenoss CWE-264
7.5
2014-12-15 CVE-2014-6256 Permissions, Privileges, and Access Controls vulnerability in Zenoss Core
Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public (1) read or (2) execute access via a move action, aka ZEN-15386.
network
low complexity
zenoss CWE-264
7.5