Vendors / Munkireport Project Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Munkireport Project records in CISA KEV No Munkireport Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order[0][dir] field on POST requests to /datatables/data.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01234 · Published 2020-07-23 · No fix listed CWE-89
Priority MEDIUM 41
An issue was discovered in MunkiReport before 5.3.0.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01238 · Published 2020-03-09 · No fix listed CWE-89
Priority LOW 36
A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines from the MunkiReport database.
CVSS 3.1 HIGH 8.1· Network · No auth · User interaction · EPSS 0.00619 · Published 2020-07-23 · No fix listed CWE-352
Priority LOW 29
An issue was discovered in Munkireport before 5.3.0.3923.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00753 · Published 2020-03-09 · No fix listed CWE-79
Priority LOW 25
An issue was discovered in MunkiReport before 5.3.0.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00598 · Published 2020-03-09 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 3 0 0
