Vendors / Powerjob Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 2
Exploited now Powerjob records in CISA KEV No Powerjob vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.3 · Published 2023-07-28 · No fix listed
Priority HIGH 70
A weakness has been identified in PowerJob up to 5.1.2.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0109 · Published 2025-10-10 · No fix listed CWE-862
Priority MEDIUM 64
A security vulnerability has been detected in PowerJob up to 5.1.2.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00458 · Published 2025-10-10 · No fix listed CWE-862
Priority MEDIUM 63
PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02998 · Published 2023-04-19 · No fix listed CWE-284
Priority MEDIUM 63
PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00533 · Published 2023-04-19 · No fix listed CWE-284
Priority MEDIUM 57
A vulnerability was identified in PowerJob up to 5.1.2.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00348 · Published 2025-12-11 · No fix listed CWE-918
Priority MEDIUM 51
PowerJob V4.3.2 has unauthorized interface that causes remote code execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01171 · Published 2023-04-20 · No fix listed
Priority MEDIUM 51
PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01081 · Published 2023-04-21 · No fix listed CWE-284
Priority MEDIUM 49
Powerjob >= 3.20 is vulnerable to SQL injection via the version parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00421 · Published 2024-11-11 · No fix listed CWE-89
Priority MEDIUM 42
PowerJob V4.3.1 is vulnerable to Insecure Permissions.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.09545 · Published 2023-04-19 · No fix listed CWE-276
Priority MEDIUM 41
An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00912 · Published 2023-08-17 · No fix listed CWE-284
Priority LOW 34
An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00818 · Published 2022-06-16 · Fixed in 3.3.3 CWE-522
Open these records in search → All records by CVSS severity
4 2 6 0 0
THREATIST.IORead the docs