Search criteria

3 vulnerabilities found for NetFlow Analyzer by Zoho Corporation

JVNDB-2015-000076

Vulnerability from jvndb - Published: 2015-06-05 14:14 - Updated:2015-06-10 16:14
Severity ?
N/A (UNKNOWN) - -
Summary
NetFlow Analyzer vulnerable to cross-site request forgery
Details
NetFlow Analyzer provided by Zoho Corporation contains a cross-site request forgery vulnerability.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000076.html",
  "dc:date": "2015-06-10T16:14+09:00",
  "dcterms:issued": "2015-06-05T14:14+09:00",
  "dcterms:modified": "2015-06-10T16:14+09:00",
  "description": "NetFlow Analyzer provided by Zoho Corporation contains a cross-site request forgery vulnerability.",
  "link": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000076.html",
  "sec:cpe": {
    "#text": "cpe:/a:zohocorp:netflow_analyzer",
    "@product": "NetFlow Analyzer",
    "@vendor": "Zoho Corporation",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2015-000076",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN79284156/index.html",
      "@id": "JVN#79284156",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2961",
      "@id": "CVE-2015-2961",
      "@source": "CVE"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2961",
      "@id": "CVE-2015-2961",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-352",
      "@title": "Cross-Site Request Forgery(CWE-352)"
    }
  ],
  "title": "NetFlow Analyzer vulnerable to cross-site request forgery"
}

JVNDB-2015-000075

Vulnerability from jvndb - Published: 2015-06-05 14:02 - Updated:2015-06-10 16:10
Severity ?
N/A (UNKNOWN) - -
Summary
NetFlow Analyzer fails to restrict access permissions
Details
NetFlow Analyzer provided by Zoho Corporation fails to restrict access permissions. Tomoshige Hasegawa, Akihito Mukai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000075.html",
  "dc:date": "2015-06-10T16:10+09:00",
  "dcterms:issued": "2015-06-05T14:02+09:00",
  "dcterms:modified": "2015-06-10T16:10+09:00",
  "description": "NetFlow Analyzer provided by Zoho Corporation fails to restrict access permissions.\r\n\r\nTomoshige Hasegawa, Akihito Mukai reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000075.html",
  "sec:cpe": {
    "#text": "cpe:/a:zohocorp:netflow_analyzer",
    "@product": "NetFlow Analyzer",
    "@vendor": "Zoho Corporation",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2015-000075",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN25598413/index.html",
      "@id": "JVN#25598413",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2959",
      "@id": "CVE-2015-2959",
      "@source": "CVE"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2959",
      "@id": "CVE-2015-2959",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-264",
      "@title": "Permissions(CWE-264)"
    }
  ],
  "title": "NetFlow Analyzer fails to restrict access permissions"
}

JVNDB-2015-000074

Vulnerability from jvndb - Published: 2015-06-05 13:59 - Updated:2015-06-10 16:06
Severity ?
N/A (UNKNOWN) - -
Summary
NetFlow Analyzer vulnerable to cross-site scripting
Details
NetFlow Analyzer provided by Zoho Corporation contains a cross-site scripting vulnerability. Tomoshige Hasegawa, Akihito Mukai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000074.html",
  "dc:date": "2015-06-10T16:06+09:00",
  "dcterms:issued": "2015-06-05T13:59+09:00",
  "dcterms:modified": "2015-06-10T16:06+09:00",
  "description": "NetFlow Analyzer provided by Zoho Corporation contains a cross-site scripting vulnerability.\r\n\r\nTomoshige Hasegawa, Akihito Mukai reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000074.html",
  "sec:cpe": {
    "#text": "cpe:/a:zohocorp:netflow_analyzer",
    "@product": "NetFlow Analyzer",
    "@vendor": "Zoho Corporation",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2015-000074",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN98447310/index.html",
      "@id": "JVN#98447310",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2960",
      "@id": "CVE-2015-2960",
      "@source": "CVE"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2960",
      "@id": "CVE-2015-2960",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "NetFlow Analyzer vulnerable to cross-site scripting"
}