Vendors / Getcockpit Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Getcockpit records in CISA KEV No Getcockpit vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter.
CVSS 3.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.08357 · Published 2018-05-02 · No fix listed CWE-918
Priority LOW 25
Cockpit 0.5.5 has XSS via a collection, form, or region.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00537 · Published 2018-05-25 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 0 1 0 0
