Vendors / Inedo Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 3
Exploited now Inedo records in CISA KEV No Inedo vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by causing a denial of service (when an attacker executes a loop calling RestartWeb)…
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.00477 · Published 2025-05-03 · No fix listed CWE-288
Priority MEDIUM 46
In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02022 · Published 2017-11-10 · No fix listed
Priority MEDIUM 45
Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the…
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01393 · Published 2017-12-01 · No fix listed CWE-20
Priority MEDIUM 45
Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters, aka OT-181.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01717 · Published 2017-12-01 · No fix listed CWE-22
Priority LOW 35
Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01057 · Published 2017-11-11 · No fix listed CWE-269
Priority LOW 34
Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00863 · Published 2017-09-29 · No fix listed CWE-20
Priority LOW 29
An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01039 · Published 2017-11-10 · No fix listed CWE-601
Priority LOW 29
Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00411 · Published 2018-09-26 · No fix listed CWE-352
Priority LOW 28
Inedo BuildMaster before 5.8.2 has XSS.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00641 · Published 2017-11-10 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 3 3 0 0
THREATIST.IORead the docs