Xorux

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Xorux records in CISA KEV

No Xorux vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lpar2rrd 9 records HIGH Stor2rrd 4 records MEDIUM Xormon 2 records MEDIUM

Records

2 records in Xormon · all components

TI-2025-34527 CVE-2025-54766 · GHSA-hfvg-35rj-h837

KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information

MEDIUM 63

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.10221 Published 2025-07-28 Fixed in 1.9.38 CWE-648

TI-2025-34526 CVE-2025-54765 · GHSA-6rgx-j4wh-77c4

KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator

MEDIUM 63

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.10221 Published 2025-07-28 Fixed in 1.9.38 CWE-648

Open these records in search →

Critical	4
High	3
Medium	4
Low	0
No CVSS	0