HOMEVULNERABILITIESVENDORSNeuvector

NeuvectorCVEs & Vulnerabilities

1 CVEs affecting Neuvector products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

neuvector 1
CVE-2019-19747CRITICAL

NeuVector 3.1 when configured to allow authentication via Active Directory, does not enforce non-empty passwords which allows an attacker with access to the Neuvector portal to authenticate as any valid LDAP user by providing a valid username and an empty password (provided that the active directory server has not been configured to reject empty passwords).

20 Dec 2019
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database