Read the docs

Labkey

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Labkey records in CISA KEV

No Labkey vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Labkey Server 6 records MEDIUM

Records

6 records

TI-2019-02918 CVE-2019-3912 · GHSA-8pq2-wp8v-hcwc

Open redirect in Tenable LabKey Server Community Edition

Priority LOW 35

An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote attacker to redirect users to arbitrary web sites.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04966 Published 2019-01-30 Fixed in 18.3.0-61806.763 CWE-601
TI-2019-02917 CVE-2019-3911 · GHSA-2x5v-3qcr-cj3f

Cross-site scripting in Tenable LabKey Server Community Edition

Priority LOW 34

Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remote attacker to inject arbitrary javascript via the onerror parameter in the /__r…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03771 Published 2019-01-30 Fixed in 18.3.0-61806.763 CWE-79
TI-2019-02919 CVE-2019-3913 · GHSA-376f-mcx4-5jxg

Command injection in Tenable LabKey Server Community Edition

Priority LOW 26

Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any drive on the system leading to denial of service.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01738 Published 2019-01-30 Fixed in 18.3.0-61806.763 CWE-77
Open these records in search →