OpenPNE

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

OpenPNE records in CISA KEV

No OpenPNE vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2013-03798 CVE-2013-4335 · GHSA-vw92-xm46-h5hv

MEDIUM 47

opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02459 Published 2020-02-07 No fix listed CWE-776

TI-2013-03796 CVE-2013-4333 · GHSA-9xp4-mq53-c534

MEDIUM 44

OpenPNE 3 versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 has an External Entity Injection Vulnerability

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02226 Published 2020-01-24 No fix listed CWE-611

TI-2024-18117 CVE-2024-27278 · GHSA-57cq-mhwv-qcfq

LOW 24

OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0034 Published 2024-03-05 No fix listed CWE-79