Greenbone

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Greenbone records in CISA KEV

No Greenbone vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Greenbone Security Assistant 4 records MEDIUM Greenbone Os 3 records MEDIUM

Records

4 records in Greenbone Security Assistant · all components

TI-2018-15243 CVE-2018-25016 · GHSA-w8jh-wm6j-74gc

Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection.

MEDIUM 45

Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01276 Published 2021-06-21 No fix listed CWE-74

TI-2011-00567 CVE-2011-0650 · GHSA-6pf5-h6gw-hqjw

Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA)…

LOW 32

Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVA…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01058 Published 2011-01-28 No fix listed CWE-352

TI-2016-01763 CVE-2016-1926 · GHSA-m58f-5mcm-c967

Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security…

LOW 31

Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_type parameter in a ge…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01619 Published 2016-01-26 No fix listed CWE-79

TI-2019-15187 CVE-2019-25047 · GHSA-2jh2-4x98-cv5j

Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10…

LOW 29

Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01114 Published 2021-06-21 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	3
Low	0
No CVSS	0