Influxdata

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Influxdata records in CISA KEV

No Influxdata vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Influxdb 3 records HIGH Telegraf 1 record MEDIUM

Records

3 records in Influxdb · all components

TI-2019-15140 CVE-2019-20933 · GHSA-2rmp-fw5r-j5qv

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate…

HIGH 66

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30921 Published 2020-11-19 Fixed in 1.7.6 CWE-287

TI-2022-16928 CVE-2022-36640 · GHSA-x7v4-5qjr-j62x

influxData influxDB before v1.8.10 contains no authentication mechanism or controls…

MEDIUM 47

influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02567 Published 2022-09-02 No fix listed CWE-276

TI-2018-12518 CVE-2018-17572 · GHSA-w55x-q3gv-px85

InfluxDB 0.9.5 has Reflected XSS in the Write Data module.

LOW 23

InfluxDB 0.9.5 has Reflected XSS in the Write Data module.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00727 Published 2020-03-02 Fixed in 0.9.6 CWE-79

Open these records in search →

Critical	3
High	0
Medium	1
Low	0
No CVSS	0