Vendors / DependencyTrack Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now DependencyTrack records in CISA KEV No DependencyTrack vulnerabilities are listed in CISA KEV.
Priority MEDIUM 54
Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain.
CVSS 3.1 MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00186 · Published 2025-02-24 · Fixed in 4.12.6 CWE-73
Priority LOW 30
Dependency-Track is a Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00309 · Published 2024-12-04 · Fixed in 4.12.2 CWE-203
Priority LOW 22
@dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00239 · Published 2025-11-17 · Fixed in 4.13.6 CWE-79
Priority LOW 21
Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain.
CVSS 3.1 MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.00276 · Published 2025-10-07 · Fixed in 4.13.5 CWE-522
Open these records in search → All records by CVSS severity
0 0 4 0 0
THREATIST.IORead the docs