Netdisco

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Netdisco records in CISA KEV

No Netdisco vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Netdisco · all components

TI-2023-19194 CVE-2023-37624 · GHSA-gw8w-qw5v-vj6c

MEDIUM 60

Netdisco before v2.063000 was discovered to contain an open redirect vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0065 Published 2023-07-26 No fix listed CWE-601

TI-2023-19193 CVE-2023-37623 · GHSA-w978-xwmq-r68w

MEDIUM 55

Netdisco before v2.063000 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Web/TypeAhead.pm.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00625 Published 2023-07-26 No fix listed CWE-79

TI-2019-11878 CVE-2019-15810 · GHSA-6r28-6vrf-96vj

LOW 29

Insufficient sanitization during device search in Netdisco 2.042010 allows for reflected XSS via manipulation of a URL parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00878 Published 2019-09-30 No fix listed CWE-79