Vendors / Cockpit-project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Cockpit-project records in CISA KEV No Cockpit-project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.04858 · Published 2019-03-26 · Fixed CWE-909
Priority LOW 34
A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00704 · Published 2022-03-08 · Partial fix CWE-295
Priority LOW 32
An SSRF issue was discovered in cockpit-project.org Cockpit 234.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01664 · Published 2020-12-30 · No fix listed CWE-918
Priority LOW 23
Cockpit (and its plugins) do not seem to protect itself against clickjacking.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.01261 · Published 2022-03-07 · Partial fix CWE-1021
Open these records in search → All records by CVSS severity
0 2 2 0 0
THREATIST.IORead the docs