Read the docs

sleuthkit

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

sleuthkit records in CISA KEV

No sleuthkit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Autopsy · all components

Priority MEDIUM 48

autopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02502 Published 2018-12-20 No fix listed CWE-611
Open these records in search →