Jeedom

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jeedom records in CISA KEV

No Jeedom vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Jeedom · all components

TI-2021-18842 CVE-2021-42557 · GHSA-pf9w-v4v3-5wvw

LOW 37

In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02249 Published 2021-11-01 No fix listed

TI-2020-07253 CVE-2020-9036 · GHSA-fq6m-28xv-2hw5

LOW 34

Jeedom through 4.0.38 allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03763 Published 2020-08-05 No fix listed CWE-79