Xfce

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Xfce records in CISA KEV

No Xfce vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Exo · all components

TI-2022-13985 CVE-2022-32278 · GHSA-9xwj-fh68-48fj

MEDIUM 42

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01766 Published 2022-06-13 No fix listed