Gluu

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Gluu records in CISA KEV

No Gluu vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Oxauth · all components

TI-2022-16936 CVE-2022-36663 · GHSA-hc94-9v26-gxwv

MEDIUM 47

Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02581 Published 2022-09-06 Fixed in 4.4.1 CWE-918