Vendors / Openenergymonitor Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Openenergymonitor records in CISA KEV No Openenergymonitor vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
A SQL Injection vulnerability exists in the /feed/insert.json endpoint of the Emoncms project >= 11.6.9.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00533 · Published 2025-02-06 · No fix listed CWE-89
Priority HIGH 68
Emoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature that allows authenticated users to execute arbitrary commands on the target system.
CVSS 3.1 HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00609 · Published 2025-10-24 · No fix listed CWE-20
Priority MEDIUM 60
Emoncms 11.7.3 is vulnerable to Cross Site in the input handling mechanism.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00195 · Published 2025-10-24 · No fix listed CWE-79
Priority LOW 29
Modules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00791 · Published 2021-02-21 · No fix listed CWE-79
Priority LOW 29
An issue was discovered in Emoncms through 9.8.0.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00918 · Published 2017-02-12 · No fix listed CWE-79
Priority LOW 26
OpenEnergyMonitor Project Emoncms 9.8.8 is affected by: Cross Site Scripting (XSS).
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0088 · Published 2019-07-15 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 1 4 0 0
THREATIST.IORead the docs