Rockmongo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Rockmongo records in CISA KEV

No Rockmongo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rockmongo 3 records MEDIUM

Records

3 records in Rockmongo · all components

TI-2023-30221 CVE-2023-53938 · GHSA-8rr6-65c8-jjwx

RockMongo 1.1.7 Stored Cross-Site Scripting Vulnerability via Multiple Parameters

MEDIUM 56

RockMongo 1.1.7 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple unencoded input parameters.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00247 Published 2025-12-18 No fix listed CWE-79

TI-2013-04435 CVE-2013-5107 · GHSA-gwxw-3qw5-mfrx

Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers…

LOW 26

Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01831 Published 2013-12-14 No fix listed CWE-22

TI-2013-04436 CVE-2013-5108 · GHSA-cxqc-jm2g-f2cf

Multiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) db parameter on the login page or (2) userna…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0145 Published 2013-12-05 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0