gchq

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

gchq records in CISA KEV

No gchq vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Stroom 2 records MEDIUM Cyberchef 1 record LOW

Records

2 records in Stroom · all components

TI-2018-16004 CVE-2018-1000651 · GHSA-7wwr-6qph-hrh6

Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser…

MEDIUM 47

Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01855 Published 2018-08-20 No fix listed CWE-611

TI-2019-08044 CVE-2019-10779

Cross-site scripting in stroom:stroom-app

LOW 29

All versions of stroom:stroom-app before 5.5.12 and all versions of the 6.0.0 branch before 6.0.25 are affected by Cross-site Scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00906 Published 2020-01-28 Fixed in 5.5.12 CWE-79

Open these records in search →

Critical	2
High	1
Medium	4
Low	0
No CVSS	0