vantage6

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

vantage6 records in CISA KEV

No vantage6 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Vantage6 16 records MEDIUM Vantage6-ui 2 records LOW

Records

16 records in Vantage6 · all components

TI-2024-14786 CVE-2024-22193 · GHSA-rjmv-52mp-gjrr

vantage6 unencrypted task can be created in encrypted collaboration

MEDIUM 53

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00257 Published 2024-01-30 Fixed in 4.2.0 CWE-922

TI-2024-14378 CVE-2024-21653 · GHSA-2wgc-48g2-cj5w

vantage6 insecure SSH configuration for node and server containers

MEDIUM 48

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0047 Published 2024-01-30 Fixed in 4.2.0 CWE-284

TI-2024-14374 CVE-2024-21649 · GHSA-w9h2-px87-74vx

Remote code execution in vantage6

MEDIUM 43

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01266 Published 2024-01-30 Fixed in 4.2.0 CWE-94

TI-2023-09727 CVE-2023-23929 · GHSA-4w59-c3gc-rrhp

Refresh tokens do not expire in Vantage6

MEDIUM 41

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00571 Published 2023-03-03 Fixed in 3.8.0 CWE-613

TI-2023-25773 CVE-2023-47631 · GHSA-vc3v-ppc7-v486

vantage6 Node accepts non-whitelisted algorithms from malicious server

LOW 38

vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00446 Published 2023-11-14 Fixed in 4.1.2 CWE-345

TI-2023-09728 CVE-2023-23930 · GHSA-5m22-cfq9-86x6

vantage6's Pickle serialization is insecure

LOW 34

vantage6 is privacy preserving federated learning infrastructure.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01108 Published 2023-10-11 Fixed in 4.0.0, 4.0.2 CWE-502

TI-2024-16287 CVE-2024-24770 · GHSA-5h3x-6gwf-73jm

Username timing attack on recover password/MFA token in vantage6

LOW 30

vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00397 Published 2024-03-14 Fixed in 4.3.0 CWE-208

TI-2022-18606 CVE-2022-39228 · GHSA-36gx-9q6h-g429

Observable Response Discrepancy in vantage6

LOW 30

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00596 Published 2023-03-01 Fixed in 3.8.0 CWE-203

TI-2024-15817 CVE-2024-23823 · GHSA-4946-85pr-fvxh

CORS settings overly permissive in vantage6

LOW 29

vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00314 Published 2024-03-14 Fixed in 4.3.0 CWE-863

TI-2023-08912 CVE-2023-22738 · GHSA-vvjv-97j8-94xh

Improper Preservation of Permissions in vantage6

LOW 29

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00375 Published 2023-03-01 Fixed in 3.8.0 CWE-281

TI-2023-22275 CVE-2023-41882 · GHSA-gc57-xhh5-m94r

vantage6 Improper Access Control vulnerability

LOW 25

vantage6 is privacy preserving federated learning infrastructure.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00497 Published 2023-10-11 Fixed in 4.0.0 CWE-284

TI-2023-13154 CVE-2023-28635 · GHSA-7x94-6g2m-3hp2

Defining resource name as integer in vantage6 may give unintended access

LOW 25

vantage6 is privacy preserving federated learning infrastructure.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00504 Published 2023-10-11 Fixed in 4.0.0 CWE-863

TI-2023-22274 CVE-2023-41881 · GHSA-rf54-7qrr-96j6

Deleting a collaboration should also delete linked resources

LOW 20

vantage6 is privacy preserving federated learning infrastructure.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00354 Published 2023-10-11 Fixed in 4.0.0 CWE-200

TI-2024-14392 CVE-2024-21671 · GHSA-45gq-q4xh-cp53

vantage6 username timing attack

LOW 18

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00401 Published 2024-01-30 Fixed in 4.2.0 CWE-208

TI-2025-28450 CVE-2025-43866 · GHSA-m3mq-f375-5vgh

Vantage6 Server JWT secret not cryptographically secure

LOW 10

vantage6 is an open-source infrastructure for privacy preserving analysis.

CVSS 4.0LOW 1.7 Network No auth No interaction EPSS 0.00387 Published 2025-06-12 Fixed in 4.11, 4.11.0 CWE-330

TI-2025-28447 CVE-2025-43863 · GHSA-j6g5-p62x-58hw

vantage6 lacks brute-force protection on change password functionality

LOW 10

vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation.

CVSS 4.0LOW 1.7 Network No auth No interaction EPSS 0.00466 Published 2025-06-12 Fixed in 4.11.0 CWE-307

Open these records in search →