Vendors / nocobase Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 4
Exploited now nocobase records in CISA KEV No nocobase vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00892 · Published 2026-07-15 · Fixed in 2.0.61 CWE-89
Priority HIGH 82
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.
CVSS 3.1 CRITICAL 10.0· Network · Low privileges · No interaction · EPSS 0.34966 · Published 2026-03-31 · Fixed in 2.0.28 CWE-913
Priority HIGH 78
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.
CVSS 4.0 HIGH 8.5· Network · High privileges · No interaction · EPSS 0.00413 · Published 2026-04-02 · Fixed in 2.0.30 CWE-89
Priority HIGH 73
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01875 · Published 2026-05-07 · Fixed in 2.0.39 CWE-89
Priority HIGH 70
A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.003 · Published 2026-04-13 · No fix listed CWE-264
Priority HIGH 67
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01833 · Published 2026-05-07 · Fixed in 2.0.39 CWE-284
Priority MEDIUM 63
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.
CVSS 3.1 MEDIUM 6.7· Network · High privileges · No interaction · EPSS 0.00721 · Published 2026-07-15 · Fixed in 2.1.19 CWE-78
Priority MEDIUM 63
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.
CVSS 3.1 MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00469 · Published 2026-07-15 · Fixed in 2.1.0-alpha.46, 2.0.62 +1 CWE-184
Priority MEDIUM 62
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.
CVSS 4.0 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00384 · Published 2026-04-17 · Fixed in 2.0.37 CWE-918
Priority MEDIUM 56
NocoBase through 2.1.20 contains a server-side request forgery vulnerability in the serverRequest wrapper that allows authenticated administrators to issue arbitrary outbound HTTP requests by supplying malicious URLs to…
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00337 · Published 2026-07-07 · No fix listed CWE-918
Priority LOW 39
NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL() through the sqlCollection:setFields action.
CVSS 4.0 HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00311 · Published 2026-10-19 · No fix listed CWE-89
Priority LOW 23
NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store malicious HTML with event handlers.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00298 · Published 2026-09-02 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 4 6 0 0
THREATIST.IORead the docs