CVE Tools
Track your stack

Alienvault

34 CVEs tracked since 2009. Since Sep 2009, none of them reached CISA KEV.

Alienvault CVEs per month

Sep 2009 to Oct 2017. Point at a month, or focus the strip and use the arrow keys.
Alienvault CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2009-0930
2009-10null or fewer
2009-11null or fewer
2009-1240
2010-01null or fewer
2010-02null or fewer
2010-03null or fewer
2010-04null or fewer
2010-05null or fewer
2010-06null or fewer
2010-07null or fewer
2010-08null or fewer
2010-09null or fewer
2010-10null or fewer
2010-11null or fewer
2010-12null or fewer
2011-01null or fewer
2011-02null or fewer
2011-03null or fewer
2011-04null or fewer
2011-05null or fewer
2011-06null or fewer
2011-07null or fewer
2011-08null or fewer
2011-09null or fewer
2011-10null or fewer
2011-11null or fewer
2011-12null or fewer
2012-01null or fewer
2012-02null or fewer
2012-03null or fewer
2012-04null or fewer
2012-05null or fewer
2012-06null or fewer
2012-0720
2012-08null or fewer
2012-09null or fewer
2012-10null or fewer
2012-11null or fewer
2012-12null or fewer
2013-01null or fewer
2013-02null or fewer
2013-03null or fewer
2013-04null or fewer
2013-05null or fewer
2013-06null or fewer
2013-07null or fewer
2013-0820
2013-09null or fewer
2013-1010
2013-11null or fewer
2013-12null or fewer
2014-01null or fewer
2014-02null or fewer
2014-03null or fewer
2014-04null or fewer
2014-05null or fewer
2014-0650
2014-07null or fewer
2014-0840
2014-09null or fewer
2014-10null or fewer
2014-11null or fewer
2014-12null or fewer
2015-01null or fewer
2015-02null or fewer
2015-03null or fewer
2015-04null or fewer
2015-0510
2015-06null or fewer
2015-07null or fewer
2015-08null or fewer
2015-09null or fewer
2015-10null or fewer
2015-11null or fewer
2015-12null or fewer
2016-01null or fewer
2016-02null or fewer
2016-03null or fewer
2016-04null or fewer
2016-05null or fewer
2016-06null or fewer
2016-07null or fewer
2016-08null or fewer
2016-0910
2016-1040
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-02null or fewer
2017-0340
2017-04null or fewer
2017-0520
2017-06null or fewer
2017-07null or fewer
2017-08null or fewer
2017-09null or fewer
2017-1010

Products

The products that kept showing up in Alienvault's monthly top three, with their CVEs summed over those months.

  1. Open Source Security Information Management207 months
  2. Unified Security Management115 months
  3. Ossim72 months
  4. Open Source Security Information and Event Management52 months
  5. Usm11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Alienvault.

  1. CVE-2013-6056OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability7.5
  2. CVE-2018-7279A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.9.8
  3. CVE-2017-14956AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/ossim/report/wizard_email.php" script. Besides offering an export via a local...5.7
  4. CVE-2015-4045The sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 allows local users to gain privileges via a crafted nmap script.6.7
  5. CVE-2015-4046The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/do_scan.php.7.2
  6. CVE-2017-6972AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vul...9.8
  7. CVE-2017-6970AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-104863.8.4
  8. CVE-2017-6971AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving...8.8
  9. CVE-2016-7955The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain...9.8
  10. CVE-2016-8581A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal session IDs of logged in users when the...6.1
  11. CVE-2016-8580PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included ...9.8
  12. CVE-2016-8583Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to reflected XSS.6.1
  13. CVE-2016-8582A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files v...9.8
  14. CVE-2016-6913Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload...5.4
  15. CVE-2015-3446The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file (.cfg).9.3

The record

Peak rank
#20 in Dec 2009
Busiest month shown
Jun 2014, 5 CVEs
Months with a KEV entry
0 since Sep 2009
Monthly snapshots
13 since 2009
Alienvault's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store