CVE-2013-6141

CVE-2013-6141 is a medium-severity vulnerability in Op5 Monitor with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

• Severity: Medium (CVSS 2.0 base score 5.0)
• EPSS exploit prediction: 1% (58th percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Op5 Monitor
• Published: 2014-01-29
• Last modified: 2026-06-17

Description

Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization.

Frequently asked questions

What is CVE-2013-6141?

Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization.

How severe is CVE-2013-6141?

CVE-2013-6141 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2013-6141 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (58th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2013-6141?

CVE-2013-6141 primarily affects Op5 Monitor. In total, 29 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2013-6141?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2013-6141 published?

CVE-2013-6141 was published on 2014-01-29 and last updated on 2026-06-17.

References

• https://bugs.op5.com/view.php?id=7677

Affected products (29)

• cpe:2.3:a:op5:monitor:*:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.4.2:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.5.0:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.5.1:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.5.3:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.5.3.1:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.6.0:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.6.1:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.6.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.7.0:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.7.1:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.7.3:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.7.3.1:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.7.3.3:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.7.4:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.8.0:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:5.8.1:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:6.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:6.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:6.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:6.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:6.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:6.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:6.1.0:beta6:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:6.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:6.1.2:alpha:*:*:*:*:*:*
• cpe:2.3:a:op5:monitor:6.1.2:beta4:*:*:*:*:*:*

More vulnerabilities in Op5 Monitor

• CVE-2012-0264 — Critical (CVSS 10.0): op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to…
• CVE-2012-0262 — Critical (CVSS 10.0): op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote…
• CVE-2012-0261 — Critical (CVSS 10.0): license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to…
• CVE-2008-5028 — Medium (CVSS 6.8): Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows…
• CVE-2008-5027 — Medium (CVSS 6.5): The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to…
• CVE-2021-40272 — Medium (CVSS 6.1): OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS).

All CVEs affecting Op5 Monitor →