opengoofy

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

opengoofy records in CISA KEV

No opengoofy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hippo4j 3 records MEDIUM

Records

4 records

TI-2023-11920 CVE-2023-27095 · GHSA-xg89-vvwp-9c27

Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker…

MEDIUM 62

Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the UserController function in Tenant Management module.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00564 Published 2023-03-16 No fix listed CWE-732

TI-2026-62428 CVE-2026-92569 · GHSA-9vwf-fv6w-mmfr

Hippo4j through 1.5.0 SSRF via clientAddress Parameter

MEDIUM 57

Hippo4j through 1.5.0 contains a server-side request forgery vulnerability in four ThreadPoolController endpoints that fail to validate the clientAddress parameter.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00342 Published 2026-09-16 No fix listed CWE-918

TI-2023-11919 CVE-2023-27094 · GHSA-fvx4-8h2x-gm9q

An issue found in OpenGoofy Hippo4j v.1.4.3 allows attackers to escalate privileges via…

MEDIUM 41

An issue found in OpenGoofy Hippo4j v.1.4.3 allows attackers to escalate privileges via the ThreadPoolController of the tenant Management module.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00639 Published 2023-03-23 No fix listed CWE-269

TI-2023-11921 CVE-2023-27096 · GHSA-h855-6hph-v363

Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to…

LOW 30

Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to obtain sensitive information via the ConfigVerifyController function of the Tenant Management module.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00605 Published 2023-03-27 No fix listed CWE-732

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0