Vendors / Perfsonar Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Perfsonar records in CISA KEV No Perfsonar vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 76
An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.04707 · Published 2022-11-30 · No fix listed CWE-918
Priority MEDIUM 63
perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00665 · Published 2023-01-01 · No fix listed CWE-73
Priority MEDIUM 63
perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0063 · Published 2023-01-01 · No fix listed CWE-918
Priority MEDIUM 53
perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted input into the Search function.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.02221 · Published 2022-11-30 · No fix listed CWE-352
Priority LOW 34
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06883 · Published 2018-06-18 · No fix listed CWE-200
Priority LOW 34
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06883 · Published 2018-06-18 · No fix listed CWE-200
Priority LOW 34
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06883 · Published 2018-06-18 · No fix listed CWE-200
Priority LOW 34
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06883 · Published 2018-06-18 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
0 1 7 0 0
THREATIST.IORead the docs