Records87All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9
Exploited now
nasa records in CISA KEVNo nasa vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01817 · Published 2025-03-25 · No fix listed CWE-77
Priority HIGH 82
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00793 · Published 2025-03-25 · No fix listed CWE-94
Priority MEDIUM 60
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00288 · Published 2025-03-25 · No fix listed CWE-79
Priority MEDIUM 48
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00428 · Published 2026-04-21 · Fixed in 4.2.0 CWE-190
THREATIST.IORead the docs