Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
LinuxServer records in CISA KEVNo LinuxServer vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 58
Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00432 · Published 2022-12-27 · No fix listed CWE-79
Priority LOW 39
LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00606 · Published 2025-07-27 · Fixed in 2.7.3 CWE-79
Open these records in search →