CVE-2014-9618
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 73%
from disclosure to weapon0 days
Published on NVDSep 19
1st PoCAug 21
exploitation probability
73%top 1% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/37933unverifiedcve_referencepacketstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.htmlunverifiedcve_referencewww.exploit-db.com/exploits/37933/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.