Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
getredash records in CISA KEVNo getredash vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 46
Redash is a package for data visualization and sharing.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.08143 · Published 2021-11-23 · No fix listed CWE-1188
Priority MEDIUM 40
Redash is a package for data visualization and sharing.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01038 · Published 2021-11-23 · No fix listed CWE-918
Priority LOW 34
Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and prior.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01318 · Published 2020-06-11 · No fix listed CWE-918
Priority LOW 30
Redash is a package for data visualization and sharing.
CVSS 3.1MEDIUM 6.8· Network · Low privileges · No interaction · EPSS 0.00306 · Published 2021-11-23 · No fix listed CWE-352
Priority LOW 27
Redash is a package for data visualization and sharing.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00307 · Published 2026-07-15 · No fix listed CWE-601
Priority LOW 26
Redash 8.0.0 is affected by LDAP Injection.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00934 · Published 2021-03-18 · No fix listed CWE-74
Open these records in search →