Read the docs

Netflix

Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

Netflix records in CISA KEV

No Netflix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dispatch 3 records HIGH Chaos Monkey 2 records LOW Lemur 2 records MEDIUM Conductor 1 record MEDIUM Consoleme 1 record MEDIUM Dial Reference 1 record LOW E2nest 1 record MEDIUM Hollow 1 record LOW

Records

34 records

TI-2024-04374 CVE-2024-4701 · GHSA-wpcv-5jgp-69f3

Path Traversal vulnerability via File Uploads in Genie

Priority HIGH 82

A path traversal issue potentially leading to remote code execution in Genie for all versions prior to 4.3.18

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.24629 Published 2024-05-10 Fixed in 4.3.18 CWE-22
TI-2026-39854 CVE-2026-55166 · GHSA-v2wp-frmc-5q3v

Improper authorization in Netflix lemur

Priority HIGH 76

Lemur manages TLS certificate creation.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00287 Published 2026-08-18 Fixed in 1.9.2 CWE-285
TI-2026-49965 CVE-2026-71307 · GHSA-6c8m-q6g9-vrw3

Missing authorization in Netflix lemur

Priority HIGH 67

Lemur manages TLS certificate creation.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00314 Published 2026-08-18 Fixed in 1.9.3 CWE-862
TI-2020-07436 CVE-2020-9297 · GHSA-5w4q-5c4v-rhrm

Expression language injection in Netflix Titus

Priority MEDIUM 46

Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01863 Published 2020-07-14 No fix listed CWE-917
TI-2020-07435 CVE-2020-9296 · GHSA-wfj5-2mqr-7jvv

Expression language injection in Netflix Titus

Priority MEDIUM 45

Netflix Titus uses Java Bean Validation (JSR 380) custom constraint validators.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01716 Published 2020-06-16 Fixed in 2.25.4 CWE-917
TI-2024-04665 CVE-2024-5023 · GHSA-3783-62vc-jr7x

Arbitrary File Read Vulnerability in ConsoleMe via Limited Git command RCE

Priority MEDIUM 44

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Netflix ConsoleMe allows Command Injection.This issue affects ConsoleMe: before 1.4.0.

CVSS 4.0CRITICAL 9.3 Network Low privileges No interaction EPSS 0.00936 Published 2024-05-16 Fixed in 1.4.0 CWE-77
TI-2023-14607 CVE-2023-30797 · GHSA-5fqv-mpj8-h7gm

Insecure Random Generation in Netflix Lemur

Priority MEDIUM 40

Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2023-04-19 Fixed in 1.3.2 CWE-330
TI-2020-02199 CVE-2020-2322 · GHSA-mr75-899x-qcxq

Missing authorization in Jenkins Chaos Monkey Plugin

Priority LOW 36

Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to generate load and to generate memory leaks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01339 Published 2020-12-03 Fixed in 0.4.1, 0.4 CWE-862
Load more
Open these records in search →