Vendors / Irods Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 1
Exploited now Irods records in CISA KEV No Irods vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cpp#L94-L106 reference.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00608 · Published 2024-06-16 · No fix listed CWE-426
Priority MEDIUM 46
Untrusted input execution via igetwild in all iRODS versions before 4.1.11 and 4.2.1 allows other iRODS users (potentially anonymous) to execute remote shell commands via iRODS virtual pathnames.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02092 · Published 2017-05-05 · No fix listed CWE-78
Priority MEDIUM 46
Multiple unspecified vulnerabilities in iRODS before 3.1 have unknown impact and attack vectors.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01679 · Published 2012-11-17 · No fix listed
Priority LOW 39
irodsServerMonPerf in iRODS before 4.3.2 attempts to proceed with use of a path even if it is not a directory.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00435 · Published 2024-06-16 · No fix listed CWE-754
Open these records in search → All records by CVSS severity
3 1 0 0 0
THREATIST.IORead the docs