Skip to content
OpenAdvisories

Vendor

Zenoss

2 known vulnerabilities.

Products

Zenoss Core 1 Dashboard 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2012-10048 Public exploit

    Zenoss 3.x showDaemonXMLConfig Command Execution

    Zenoss Core 3.x contains a command injection vulnerability in the showDaemonXMLConfig endpoint. The daemon parameter is passed directly to a Popen() call in ZenossInfo.py without proper sanitation, allowing authenticated users to execute arbitrary commands on…

    Zenoss Zenoss Core