Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Snowplow records in CISA KEVNo Snowplow vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 39
This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind a reverse proxy that establishes payload limits).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00425 · Published 2025-04-03 · No fix listed CWE-400
Priority LOW 39
An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00425 · Published 2025-04-03 · No fix listed CWE-703
Priority LOW 39
An issue was discovered in Iglu Server 0.13.0 and below.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00425 · Published 2025-04-03 · No fix listed
Priority LOW 39
An issue was discovered affecting Enrich 5.1.0 and below.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00425 · Published 2025-04-03 · No fix listed CWE-404
Priority LOW 33
An issue was discovered in Iglu Server 0.13.0 and below.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00425 · Published 2025-04-03 · No fix listed CWE-400
Priority LOW 29
An issue was discovered in Iglu Server 0.13.0 and below.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00407 · Published 2025-04-03 · No fix listed
