Open-falcon

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Open-falcon records in CISA KEV

No Open-falcon vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dashboard 1 record HIGH Falcon-plus 1 record MEDIUM

Records

2 records

TI-2021-09001 CVE-2021-27523 · GHSA-q9pj-52mg-v689

An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers…

HIGH 82

An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information via crafted POST request to register interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01163 Published 2023-08-11 No fix listed

TI-2022-09648 CVE-2022-26245 · GHSA-76j4-gggq-7rg9

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 57

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13764 Published 2022-03-27 No fix listed CWE-89

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0