Serc.js Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Serc.js Project records in CISA KEV

No Serc.js Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Serc.js · all components

TI-2016-08719 CVE-2016-10678 · GHSA-vcph-57hv-89c4

LOW 39

serc.js is a Selenium RC process wrapper serc.js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01656 Published 2018-06-04 No fix listed CWE-311