Plesk

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Plesk records in CISA KEV

No Plesk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Plesk 5 records MEDIUM Obsidian 4 records MEDIUM Onyx 2 records LOW Plesk Server Administrator 1 record LOW

Records

2 records in Onyx · all components

TI-2023-23475 CVE-2023-43784 · GHSA-xxxv-ffhq-jc78

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an…

LOW 34

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00565 Published 2023-09-22 No fix listed CWE-668

TI-2020-09286 CVE-2020-11584 · GHSA-hgjq-9w99-jfwx

A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote…

LOW 29

A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2020-08-03 No fix listed CWE-79

Open these records in search →

Critical	2
High	4
Medium	8
Low	0
No CVSS	0