prometheus

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

prometheus records in CISA KEV

No prometheus vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Blackbox Exporter · all components

TI-2023-11754 CVE-2023-26735

HIGH 72

blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0089 Published 2023-04-25 No fix listed CWE-918

TI-2020-12777 CVE-2020-16248 · GHSA-8jrj-57gq-475g

LOW 32

Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.03106 Published 2020-08-09 No fix listed CWE-918