Read the docs

Mmonit

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mmonit records in CISA KEV

No Mmonit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
M/monit 2 records MEDIUM Monit 2 records LOW

Records

4 records

TI-2014-05455 CVE-2014-6607 · GHSA-3fgg-2gjx-mcfm

M/Monit 3.3.2 and earlier does not verify the original password before changing…

Priority MEDIUM 42

M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06647 Published 2014-10-06 No fix listed CWE-255
TI-2014-05265 CVE-2014-6409 · GHSA-8j2v-g6c3-rfrm

Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows…

Priority LOW 34

Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that change user passwords via the fullname and password pa…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02268 Published 2014-10-06 No fix listed CWE-352
TI-2019-08549 CVE-2019-11454 · GHSA-8hqm-hwvr-wgv7

Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3…

Priority LOW 32

Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introduce arbitrary JavaScript via manipulation of an unsanitized user field of the Au…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02414 Published 2019-04-22 No fix listed CWE-79
Open these records in search →