CVE-2017-14985: EyesOfNetwork

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/module_frame/index.php.

Affected products

• EyesOfNetwork EyesOfNetwork: version 5.1-0 only

Published 2017-10-03. Last modified 2026-06-17.