Open-falcon

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Open-falcon records in CISA KEV

No Open-falcon vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Falcon-plus · all components

TI-2022-09648 CVE-2022-26245 · GHSA-76j4-gggq-7rg9

MEDIUM 57

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13764 Published 2022-03-27 No fix listed CWE-89