Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Filigran records in CISA KEVNo Filigran vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 76
OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.009 · Published 2026-04-20 · Fixed in 2.0.13 CWE-640
Priority MEDIUM 64
OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.01088 · Published 2026-01-30 · No fix listed CWE-22
Priority MEDIUM 56
OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql endpoint.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00393 · Published 2026-01-30 · No fix listed CWE-79
Open these records in search →