Read the docs

Opnsense Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Opnsense Project records in CISA KEV

No Opnsense Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Opnsense 1 record MEDIUM

Records

1 record in Opnsense · all components

TI-2017-14688 CVE-2017-1000479 · GHSA-vh6j-wmcp-r6j7

pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error…

Priority MEDIUM 62

pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, because the error detection occurs before an X-Frame-Options header is s…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.31701 Published 2018-01-03 No fix listed CWE-352
Open these records in search →