Patch & vulnerability status
AlienVault
AlienVault OSIM
Release status, tracked CVEs, and automated cross-platform patching for AlienVault OSIM.
| Platform | Latest version | CVEs tracked | Last checked |
|---|---|---|---|
| Windows | 17 | 2024-07-02 |
Known vulnerabilities (CVEs) in AlienVault OSIM
Lavawall tracks 17 published CVEs affecting AlienVault OSIM, and deploys the versions that fix them automatically across your fleet.
| CVE | Published | Severity | Details | Vector |
|---|---|---|---|---|
| CVE-2018-7279 | 2018-03-14 13:29:01 | HIGH (8) | A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1. | NETWORK |
| CVE-2015-4046 | 2017-05-23 04:29:00 | MEDIUM (7) | The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/do_scan.php. | NETWORK |
| CVE-2015-4045 | 2017-05-23 04:29:00 | HIGH (7) | The sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 allows local users to gain privileges via a crafted nmap script. | LOCAL |
| CVE-2014-5383 | 2014-08-21 14:55:06 | MEDIUM (7) | SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. | NETWORK |
| CVE-2014-5210 | 2014-08-21 14:55:06 | HIGH (10) | The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805. | NETWORK |
| CVE-2014-5159 | 2014-08-21 14:55:06 | HIGH (8) | SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter. | NETWORK |
| CVE-2014-5158 | 2014-08-21 14:55:06 | HIGH (10) | The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors. | NETWORK |
| CVE-2014-4153 | 2014-06-18 19:55:07 | HIGH (8) | The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request. | NETWORK |
| CVE-2014-4152 | 2014-06-18 19:55:07 | HIGH (10) | The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an ssh public key. | NETWORK |
| CVE-2014-4151 | 2014-06-18 19:55:07 | HIGH (10) | The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted set_file request. | NETWORK |
| CVE-2014-3805 | 2014-06-13 14:55:16 | HIGH (10) | The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get_license, (2) get_log_line, or (3) update_system/upgrade_pro_web request, a different vulnerability than CVE-2014-3804. | NETWORK |
| CVE-2014-3804 | 2014-06-13 14:55:16 | HIGH (10) | The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a different vulnerability than CVE-2014-3805. | NETWORK |
| CVE-2013-5967 | 2013-10-09 14:54:27 | HIGH (8) | Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the date_from parameter to (1) radar-iso27001-potential.php, (2) radar-iso27001-A12IS_acquisition-pot.php, (3) radar-iso27001-A11AccessControl-pot.php, (4) radar-iso27001-A10Com_OP_Mgnt-pot.php, or (5) radar-pci-potential.php in RadarReport/. | NETWORK |
| CVE-2013-5321 | 2013-08-20 14:56:29 | HIGH (8) | Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) sensor parameter in a Query action to forensics/base_qry_main.php; the (2) tcp_flags[] or (3) tcp_port[0][4] parameter to forensics/base_stat_alerts.php; the (4) ip_addr[1][8] or (5) port_type parameter to forensics/base_stat_ports.php; or the (6) sortby or (7) rvalue parameter in a search action to vulnmeter/index.php. | NETWORK |
| CVE-2013-5300 | 2013-08-15 20:55:04 | MEDIUM (4) | Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu parameter to (1) vulnmeter/index.php or (2) vulnmeter/sched.php; the (3) section parameter to av_inventory/task_edit.php; the (4) profile parameter to nfsen/rrdgraph.php; or the (5) scan_server or (6) targets parameter to vulnmeter/simulate.php. | NETWORK |
| CVE-2012-3835 | 2012-07-03 22:55:03 | MEDIUM (4) | Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to top.php or (2) time[0][0] parameter to forensics/base_qry_main.php, which is not properly handled in an error page. | NETWORK |
| CVE-2012-3834 | 2012-07-03 22:55:03 | MEDIUM (7) | SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter. | NETWORK |
Why keeping AlienVault OSIM patched matters
Unpatched third-party applications are one of the most common ways attackers get in: 57% of breached MSP clients and 32% of ransomware cases trace back to a missing patch. Every AlienVault OSIM release that fixes a security bug is public, so attackers see it too, and an out-of-date install becomes a documented way in. Tracking the installed version on every machine and closing the gap quickly is what turns a disclosed CVE into a non-event.
How Lavawall® patches AlienVault OSIM
Lavawall® watches AlienVault OSIM releases and CVEs continuously, ranks each update by risk, and deploys it across your whole fleet, Windows, macOS, and Linux, from a single agent, independently of your RMM. You get one place to see which machines are behind on AlienVault OSIM, one policy to bring them current, and timestamped evidence for audits.
Frequently asked questions
What is the latest version of AlienVault OSIM?
Lavawall tracks AlienVault OSIM (last checked 2024-07-02). New releases are monitored continuously and can be deployed automatically across your fleet.
Lavawall tracks AlienVault OSIM (last checked 2024-07-02). New releases are monitored continuously and can be deployed automatically across your fleet.
Does AlienVault OSIM have known security vulnerabilities (CVEs)?
Lavawall tracks 17 CVEs for AlienVault OSIM and remediates them automatically as part of patching.
Lavawall tracks 17 CVEs for AlienVault OSIM and remediates them automatically as part of patching.
How do I patch AlienVault OSIM automatically?
Deploy the Lavawall® agent and AlienVault OSIM updates are applied automatically across Windows, macOS, and Linux, risk-ranked and reported, independently of your RMM.
Deploy the Lavawall® agent and AlienVault OSIM updates are applied automatically across Windows, macOS, and Linux, risk-ranked and reported, independently of your RMM.
Lavawall® monitors releases and CVEs for AlienVault OSIM through public information and proprietary statistical analysis, and can patch it automatically across your fleet.