Cloverdx

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Cloverdx records in CISA KEV

No Cloverdx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cloverdx 4 records MEDIUM

Records

4 records in Cloverdx · all components

TI-2021-10611 CVE-2021-29995 · GHSA-2w86-3xc7-pmwq

A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0…

MEDIUM 45

A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows remote attackers to execute any action as the logged-in user (including script execution).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04208 Published 2021-06-09 No fix listed CWE-352

TI-2023-14785 CVE-2023-31056 · GHSA-c45c-73jc-5cp5

CloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the…

MEDIUM 42

CloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log is enabled and single sign-on is not employed.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0062 Published 2023-04-24 No fix listed CWE-532

TI-2021-18978 CVE-2021-42776 · GHSA-gm54-mw9w-8cv2

CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import.

LOW 35

CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00799 Published 2021-12-01 No fix listed CWE-611

TI-2021-10680 CVE-2021-30133 · GHSA-qg22-34xc-h6jh

A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1…

LOW 29

A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionToken parameter of multiple m…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00754 Published 2021-06-09 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	1
Low	0
No CVSS	0