Weave

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Weave records in CISA KEV

No Weave vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weave Gitops 3 records MEDIUM Gitops Tools 2 records MEDIUM Cloud Agent 1 record MEDIUM Gitops Terraform Controller 1 record LOW Weave 1 record LOW Weave Desktop 1 record LOW Weave Net 1 record LOW

Records

1 record in Weave · all components

TI-2020-16099 CVE-2020-26278

Weave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilities

LOW 36

Weave Net is open source software which creates a virtual network that connects Docker containers across multiple hosts and enables their automatic discovery.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00745 Published 2021-01-20 Fixed in 2.8.0 CWE-250

Open these records in search →

Critical	4
High	5
Medium	1
Low	0
No CVSS	0