Read the docs

Openfiler

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Openfiler records in CISA KEV

No Openfiler vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openfiler 4 records LOW

Records

4 records in Openfiler · all components

TI-2011-00939 CVE-2011-1086 · GHSA-593x-cp4m-7r46

Cross-site scripting in Openfiler

Priority LOW 31

Cross-site scripting (XSS) vulnerability in admin/system.html in Openfiler 2.3 allows remote attackers to inject arbitrary web script or HTML via the device parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01666 Published 2020-02-07 No fix listed CWE-79
TI-2014-03531 CVE-2014-4309 · GHSA-vr9m-pp3c-c964

Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote…

Priority LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via the (1) TinkerAjax parameter to uptime.html, or remote authenticated users to inject…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00984 Published 2014-06-18 No fix listed CWE-79
Open these records in search →