SaltOS

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

SaltOS records in CISA KEV

No SaltOS vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Saltos · all components

TI-2018-13277 CVE-2018-18761 · GHSA-xwm8-c743-c377

MEDIUM 59

SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16456 Published 2018-11-16 No fix listed CWE-89

TI-2018-13279 CVE-2018-18763 · GHSA-jxf2-84cf-jfqp

MEDIUM 48

SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03213 Published 2018-11-16 No fix listed CWE-89

TI-2018-13278 CVE-2018-18762 · GHSA-qwxx-r7ph-8m3q

LOW 38

SaltOS 3.1 r8126 contains a database download vulnerability.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.06189 Published 2019-03-17 No fix listed CWE-200