Known Vulnerabilities for products from Zenoss

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Zenoss".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2019-14258 json The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988. 7.5 - HIGH 2019-08-21 2019-08-30
CVE-2019-14257 json pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before privi... 7.8 - HIGH 2019-08-21 2019-08-27
CVE-2018-25063 json A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unk... 6.1 - MEDIUM 2023-01-01 2023-11-15
CVE-2014-9386 json Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote attacker... Not Provided 2014-12-15 2026-05-06
CVE-2014-9385 json Cross-site request forgery (CSRF) vulnerability in Zenoss Core through 5 Beta 3 allows remote attackers to hijack the authent... Not Provided 2014-12-15 2026-05-06
CVE-2014-9252 json Zenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might allow local users to obtain sens... Not Provided 2014-12-15 2026-05-06
CVE-2014-9251 json Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers t... Not Provided 2014-12-15 2026-05-06
CVE-2014-9250 json Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which m... Not Provided 2014-12-15 2026-05-06
CVE-2014-9249 json The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connectin... Not Provided 2014-12-15 2026-05-06
CVE-2014-9248 json Zenoss Core through 5 Beta 3 does not require complex passwords, which makes it easier for remote attackers to obtain access ... Not Provided 2014-12-15 2026-05-06
CVE-2014-9247 json Zenoss Core through 5 Beta 3 allows remote authenticated users to obtain sensitive (1) user account, (2) e-mail address, and ... Not Provided 2014-12-15 2026-05-06
CVE-2014-9245 json Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename action wi... Not Provided 2014-12-15 2026-05-06
CVE-2014-6262 json Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other product... 7.5 - HIGH 2020-02-12 2022-01-01
CVE-2014-6261 json Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, which allows remote attackers to exec... Not Provided 2014-12-15 2026-05-06
CVE-2014-6260 json Zenoss Core through 5 Beta 3 does not require a password for modifying the pager command string, which allows remote attacker... Not Provided 2014-12-15 2026-05-06
CVE-2014-6259 json Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which allows remote attackers to cau... Not Provided 2014-12-15 2026-05-06
CVE-2014-6258 json An unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial of service (CPU consumption... Not Provided 2014-12-15 2026-05-06
CVE-2014-6257 json Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by using a web-endpoint URL to in... Not Provided 2014-12-15 2026-05-06
CVE-2014-6256 json Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory wi... Not Provided 2014-12-15 2026-05-06
CVE-2014-6255 json Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to ... Not Provided 2014-12-15 2026-05-06
Results limited to 20 most recent vulnerabilities

Known software with vulnerabilities from Zenoss

Type Vendor Product Version
ApplicationZenossZenoss2.5.3
ApplicationZenossZenoss Core-

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report