Netflix

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Netflix records in CISA KEV

No Netflix vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Lemur · all components

TI-2023-14607 CVE-2023-30797 · GHSA-5fqv-mpj8-h7gm

MEDIUM 40

Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2023-04-19 Fixed in 1.3.2 CWE-330

TI-2015-06444 CVE-2015-7764 · GHSA-chg9-3c3p-ch23

LOW 36

Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01511 Published 2017-08-09 Fixed in 0.1.5 CWE-331