owasp-modsecurity

Records57All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high26CVSS 7.0–8.9

Exploited now

owasp-modsecurity records in CISA KEV

No owasp-modsecurity vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Dependency-track · all components

TI-2019-16085 CVE-2019-1020007 · GHSA-xvm7-mqpx-hcpp

LOW 25

Dependency-Track before 3.5.1 allows XSS.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00646 Published 2019-07-29 No fix listed CWE-79

TI-2022-18726 CVE-2022-39351

LOW 20

Dependency-Track is a Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00215 Published 2022-10-25 Fixed in 4.6.0 CWE-312