Known Vulnerabilities for products from Ossec
Listed below are 12 of the newest known vulnerabilities associated with the vendor "Ossec".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-28040 | An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of ope... | 7.5 - HIGH | 2021-03-05 | 2021-03-09 |
| CVE-2020-8448 | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denia... | 5.5 - MEDIUM | 2020-01-30 | 2022-09-12 |
| CVE-2020-8447 | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-a... | 9.8 - CRITICAL | 2020-01-30 | 2022-09-12 |
| CVE-2020-8446 | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to path tr... | 5.5 - MEDIUM | 2020-01-30 | 2022-09-12 |
| CVE-2020-8445 | In OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't remove or encode terminal control charac... | 9.8 - CRITICAL | 2020-01-30 | 2022-09-12 |
| CVE-2020-8444 | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-a... | 9.8 - CRITICAL | 2020-01-30 | 2022-09-12 |
| CVE-2020-8443 | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to an off-... | 9.8 - CRITICAL | 2020-01-30 | 2022-04-26 |
| CVE-2020-8442 | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a heap-... | 8.8 - HIGH | 2020-01-30 | 2022-09-12 |
| CVE-2018-19666 | The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by ... | 7.8 - HIGH | 2018-11-29 | 2019-01-04 |
| CVE-2016-4847 | Cross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbi... | 6.1 - MEDIUM | 2017-04-20 | 2017-04-25 |
| CVE-2015-3222 | syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root. | 7 - HIGH | 2017-09-07 | 2017-09-13 |
| CVE-2014-5284 | host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, which al... | 7.2 - HIGH | 2014-12-02 | 2014-12-02 |