Gluu

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Gluu records in CISA KEV

No Gluu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gluu Server 1 record LOW Oxauth 1 record MEDIUM

Records

2 records

TI-2022-16936 CVE-2022-36663 · GHSA-hc94-9v26-gxwv

Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request…

MEDIUM 47

Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02581 Published 2022-09-06 Fixed in 4.4.1 CWE-918

TI-2020-07230 CVE-2020-9012 · GHSA-2grm-pxpf-4j6v

A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu…

LOW 29

A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00777 Published 2020-02-16 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0