Munkireport Project

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Munkireport Project records in CISA KEV

No Munkireport Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Munkireport 5 records MEDIUM Comment 1 record LOW

Records

6 records

TI-2020-12502 CVE-2020-15884 · GHSA-4wqr-p7fx-5x8g

A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows…

MEDIUM 41

A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order[0][dir] field on POST requests to /datatables/data.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01234 Published 2020-07-23 No fix listed CWE-89

TI-2020-08211 CVE-2020-10190 · GHSA-mfh7-9vc7-2vcq

An issue was discovered in MunkiReport before 5.3.0.

MEDIUM 41

An issue was discovered in MunkiReport before 5.3.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01238 Published 2020-03-09 No fix listed CWE-89

TI-2020-12500 CVE-2020-15882 · GHSA-pxq6-c239-f4ph

A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers…

LOW 36

A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines from the MunkiReport database.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00619 Published 2020-07-23 No fix listed CWE-352

TI-2020-08213 CVE-2020-10192 · GHSA-hgx7-g7w4-8845

An issue was discovered in Munkireport before 5.3.0.3923.

LOW 29

An issue was discovered in Munkireport before 5.3.0.3923.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00753 Published 2020-03-09 No fix listed CWE-79

TI-2020-12503 CVE-2020-15885 · GHSA-vc4f-2g7f-pmqr

A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for…

LOW 26

A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00936 Published 2020-07-23 Fixed in 4.0 CWE-79

TI-2020-08212 CVE-2020-10191 · GHSA-xvp4-22jh-479g

An issue was discovered in MunkiReport before 5.3.0.

LOW 25

An issue was discovered in MunkiReport before 5.3.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00598 Published 2020-03-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	3
Low	0
No CVSS	0