Vendors / Openwsman Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Openwsman Project records in CISA KEV No Openwsman Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.15243 · Published 2019-03-14 · Partial fix CWE-835
Priority MEDIUM 48
Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.14739 · Published 2019-03-14 · Partial fix CWE-22
Open these records in search → All records by CVSS severity
0 2 0 0 0
