Read the docs

SaltStack

Records56All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical23CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

SaltStack records in CISA KEV
TI-2020-09349 SaltStack Salt Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2020-09350 SaltStack Salt Path Traversal Vulnerability Priority CRITICAL 86KEV 2021-11-03TI-2020-12851 SaltStack Salt Shell Injection Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Salt 52 records CRITICAL Salt 2015 2 records MEDIUM Salt 2018 1 record MEDIUM Salt 2019 1 record MEDIUM Saltstack 1 record LOW

Records

1 record in Salt 2019 · all components

TI-2019-16046 CVE-2019-1010259 · GHSA-h8xp-h3jf-wv4v

SQL injection in SaltStack Salt

Priority MEDIUM 46

SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01935 Published 2019-07-18 Fixed in 2018.3.4 CWE-89
Open these records in search →