Vendors / traccar Records 23 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 6
CVSS high 9
Exploited now traccar records in CISA KEV No traccar vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
Traccar Traccar Server version 4.0 and earlier contains a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in ComputedAttributesHandler.java that can result in Remote Command Execution.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03819 · Published 2018-12-20 · No fix listed CWE-94
Priority MEDIUM 45
In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01714 · Published 2019-01-09 · No fix listed CWE-611
Open these records in search → All records by CVSS severity
6 9 7 1 0
