TI-2024-24682 CVE-2024-37155 · GHSA-4mvw-j8r9-xcgc
OpenCTI May Bypass Introspection Restriction
Priority HIGH 75
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables.
OpenCTI-Platform
Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9
Exploited now
OpenCTI-Platform records in CISA KEVNo OpenCTI-Platform vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
22 records in Opencti · all components
Priority HIGH 70
OpenCTI is an open-source cyber threat intelligence platform.
TI-2020-19176 CVE-2020-37041 · GHSA-wvqh-8vgx-x89q
OpenCTI 3.3.1 - Directory Traversal
Priority MEDIUM 64
OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint.
TI-2026-22303 CVE-2026-27960
OpenCTI privilege escalation and unauthenticated access via default admin account
Priority MEDIUM 59
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.
TI-2020-19179 CVE-2020-37044 · GHSA-f8vp-6qv4-w6c7
OpenCTI 3.3.1 - Cross Site Scripting
Priority MEDIUM 56
OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql endpoint.
Priority MEDIUM 53
OpenCTI is an open-source cyber threat intelligence platform.
TI-2026-28835 CVE-2026-39980
OpenCTI affected by RCE via notifier template
Priority MEDIUM 44
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.
TI-2025-18657 CVE-2025-24977
OpenCTI has remote code execution and sensitive secrets exposed through web hook
Priority MEDIUM 43
OpenCTI is an open cyber threat intelligence (CTI) platform.
TI-2025-38174 CVE-2025-61781
GraphQL IDOR allows authenticated user to delete workspace content of other users
Priority LOW 39
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.
TI-2024-17229 CVE-2024-26139
OpenCTI Authenticated Privilege Escalation
Priority LOW 38
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables.
Priority LOW 35
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.
TI-2022-12527 CVE-2022-30290 · GHSA-3pmr-x3j2-ff44
In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in…
Priority LOW 35
In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint.
Priority LOW 34
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.
TI-2026-32617 CVE-2026-44730 · GHSA-q537-qhj4-wcjx
Improper access control in OpenCTI-Platform opencti
Priority LOW 33
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.
TI-2026-17588 CVE-2026-21887 · GHSA-ffm6-vvph-g5f5
OpenCTI has a Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature
Priority LOW 33
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.
TI-2026-27363 CVE-2026-35210
OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header Injection
Priority LOW 31
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.
Priority LOW 29
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.
Priority LOW 29
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.
TI-2025-18589 CVE-2025-24887
OpenCTI bypass of protected attribute update
Priority LOW 28
OpenCTI is an open-source cyber threat intelligence platform.
Priority LOW 27
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.
TI-2022-12526 CVE-2022-30289 · GHSA-5w4w-f8gg-22rw
A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import…
Priority LOW 25
A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality of OpenCTI through 5.2.4.
TI-2025-29403 CVE-2025-46732
OpenCTI's GraphQL IDOR enables authenticated users to modify or delete notifications of other users
Priority LOW 24
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.