CVE-2017-14984: EyesOfNetwork

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the bp_name parameter to /module/admin_bp/add_services.php.

Affected products

• EyesOfNetwork EyesOfNetwork: version 5.1-0 only

Published 2017-10-03. Last modified 2026-06-17.