Vendors / Untangle Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Untangle records in CISA KEV No Untangle vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 35
The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01869 · Published 2019-11-14 · No fix listed CWE-77
Priority LOW 33
The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when logged in as an admin user.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00907 · Published 2019-11-14 · No fix listed CWE-89
Priority LOW 23
When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00523 · Published 2019-11-14 · No fix listed CWE-79
Priority LOW 23
When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00523 · Published 2019-11-14 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 3 0 0
THREATIST.IORead the docs