Gosa Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Gosa Project records in CISA KEV

No Gosa Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gosa 2 records LOW Gosa Plugin 1 record MEDIUM

Records

3 records

TI-2015-07220 CVE-2015-8771 · GHSA-7v8f-m723-533x

The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote…

MEDIUM 47

The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02395 Published 2017-02-13 No fix listed CWE-94

TI-2019-10785 CVE-2019-14466 · GHSA-x55p-vmqf-hfxg

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection…

LOW 31

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file deletions (in the context of the user account that runs the w…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01177 Published 2019-12-31 No fix listed CWE-502

TI-2014-07939 CVE-2014-9760 · GHSA-6wxq-vf75-xrch

Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php…

LOW 30

Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01219 Published 2017-02-13 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0