Alienvault: >> Open Source Security Information Management >> 4.8.0 Security Vulnerabilities
A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
CVSS Score
9.8
EPSS Score
0.025
Published
2018-03-14
The sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 allows local users to gain privileges via a crafted nmap script.
CVSS Score
6.7
EPSS Score
0.001
Published
2017-05-23
The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/do_scan.php.
CVSS Score
7.2
EPSS Score
0.062
Published
2017-05-23