pfSense

Records47All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

pfSense records in CISA KEV

No pfSense vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Pfsense Plus · all components

TI-2022-07955 CVE-2022-23993 · GHSA-69h6-vqxf-rc54

LOW 30

/usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $_REQUEST['pkg_filter'] in a PHP echo call, causing XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01528 Published 2022-01-26 No fix listed CWE-79