Vendors / 1password Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now 1password records in CISA KEV No 1password vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 31
1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0103 · Published 2021-02-08 · No fix listed CWE-287
Priority LOW 23
An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service.
CVSS 3.1 MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00542 · Published 2022-06-15 · No fix listed
Open these records in search → All records by CVSS severity
Critical1 High2 Medium9 Low0 No CVSS0