Read the docs

pinpoint-apm

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

pinpoint-apm records in CISA KEV

No pinpoint-apm vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-41714 CVE-2026-57948 · GHSA-f4g5-7fg3-8rw6

Pinpoint - Insecure Session Cookie Attributes in pinpointJwt

Priority HIGH 68

Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the pinpointJwt session cookie due to missing HttpOnly and Secure attributes, enabling JavaScript acces…

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00159 Published 2026-06-29 No fix listed CWE-1004
TI-2026-41713 CVE-2026-57947 · GHSA-xx75-4fhf-jf2w

Pinpoint - Server-Side Request Forgery via Alarm Webhook Registration

Priority LOW 28

Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook registration endpoint that allows authenticated users to register internal URLs due to missing SSRF protection.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00328 Published 2026-06-29 No fix listed CWE-918
Open these records in search →