Read the docs

OpenTSDB

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

OpenTSDB records in CISA KEV

No OpenTSDB vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Opentsdb 7 records HIGH

Records

7 records in Opentsdb · all components

TI-2023-11096 CVE-2023-25826 · GHSA-h475-7v3c-26q7

Remote Code Execution in OpenTSDB

Priority HIGH 82

Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple parameters and execute malicious code on the OpenTSDB host system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.43036 Published 2023-05-03 No fix listed CWE-78
TI-2023-18606 CVE-2023-36812 · GHSA-76f7-9v52-v2fw

Remote Code Execution in OpenTSDB

Priority HIGH 65

OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16501 Published 2023-06-30 Fixed in 2.4.2 CWE-74
TI-2018-09308 CVE-2018-12972 · GHSA-cx2v-jrjc-g54w

An issue was discovered in OpenTSDB 2.3.0.

Priority MEDIUM 46

An issue was discovered in OpenTSDB 2.3.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02211 Published 2018-06-29 No fix listed CWE-78
TI-2023-11097 CVE-2023-25827 · GHSA-9chv-3w6c-jq9w

Cross-site Scripting in OpenTSDB

Priority LOW 37

Due to insufficient validation of parameters reflected in error messages by the legacy HTTP query API and the logging endpoint, it is possible to inject and execute malicious JavaScript within the browser of a targeted O…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00904 Published 2023-05-03 No fix listed CWE-79
Open these records in search →