Plesk

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Plesk records in CISA KEV

No Plesk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Plesk 5 records MEDIUM Obsidian 4 records MEDIUM Onyx 2 records LOW Plesk Server Administrator 1 record LOW

Records

4 records in Obsidian · all components

TI-2023-09824 CVE-2023-24044 · GHSA-r5c5-3whr-qfrr

A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows…

MEDIUM 60

A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites via a Host request header.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02299 Published 2023-01-22 No fix listed CWE-601

TI-2021-14427 CVE-2021-35976 · GHSA-55cx-26p7-7qcw

The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0.32 on Linux is…

LOW 30

The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0.32 on Linux is vulnerable to reflected XSS via the /plesk-site-preview/ PATH, aka PFSI-62467.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01148 Published 2021-09-10 No fix listed CWE-79

TI-2022-22206 CVE-2022-45130 · GHSA-57xm-4xq9-96rw

Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to…

LOW 29

Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an Admin password.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00451 Published 2022-11-10 No fix listed CWE-352

TI-2020-09285 CVE-2020-11583 · GHSA-869x-gj57-wpqr

A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote…

LOW 29

A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01017 Published 2020-08-03 No fix listed CWE-79

Open these records in search →

Critical	2
High	4
Medium	8
Low	0
No CVSS	0