Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2025-31260 CVE-2025-49193 · GHSA-p883-qggf-j55h

Missing HTTP Security Headers

Priority LOW 27

The application fails to implement several security headers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00325 Published 2025-06-12 Fixed in 1.5, 4.6.3 CWE-693
TI-2025-31253 CVE-2025-49186 · GHSA-437x-5r3x-xhcf

No brute-force protection

Priority LOW 35

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00383 Published 2025-06-12 Fixed in 4.6.3 CWE-307
TI-2025-31251 CVE-2025-49184 · GHSA-w75x-76gf-r6p7

Information disclosure to unauthorized user

Priority LOW 39

A remote unauthorized attacker may gather sensitive information of the application, due to missing authorization of configuration settings of the product.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0051 Published 2025-06-12 No fix listed CWE-200