Vendors / Hummerrisk Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Hummerrisk records in CISA KEV No Hummerrisk vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2025-12-08 · No fix listed CWE-502
Priority HIGH 73
An issue in HummerRisk HummerRisk v.1.10 thru 1.4.1 allows an authenticated attacker to execute arbitrary code via a crafted request to the service/LicenseService component.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00817 · Published 2024-01-16 · No fix listed CWE-94
Priority MEDIUM 57
A vulnerability has been found in HummerRisk up to 1.5.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00559 · Published 2026-02-24 · No fix listed CWE-22
Priority MEDIUM 57
A flaw has been found in HummerRisk up to 1.5.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.13374 · Published 2026-02-24 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was detected in HummerRisk up to 1.5.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.33142 · Published 2026-02-24 · No fix listed CWE-74
Priority MEDIUM 57
A security vulnerability has been detected in HummerRisk up to 1.5.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.21945 · Published 2026-02-24 · No fix listed CWE-74
Open these records in search → All records by CVSS severity
1 1 4 0 0
