Tp4a

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Tp4a records in CISA KEV

No Tp4a vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Teleport · all components

TI-2018-13853 CVE-2018-19555 · GHSA-7rgw-4mc2-rjjr

LOW 39

tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00523 Published 2018-11-26 No fix listed CWE-352

TI-2018-13682 CVE-2018-19301 · GHSA-6qxf-3cx9-hmgp

LOW 28

tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00707 Published 2018-11-15 No fix listed CWE-79