Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: SUSE neuvector 5.4.6 Clear all filters
TI-2025-07390 CVE-2025-8077 · GHSA-8pxw-9c75-6w56

NeuVector admin account has insecure default password

Priority MEDIUM 50

A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in `admin` account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00558 Published 2025-09-17 Fixed in 5.4.6, 0.0.0-20250825191744-da1a462074c3 CWE-1393
TI-2025-34264 CVE-2025-54467 · GHSA-w54x-xfxg-4gxq

NeuVector process with sensitive arguments lead to leakage

Priority LOW 30

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0025 Published 2025-09-17 Fixed in 5.4.6, 0.0.0-20250902144615-f9ddbdf42031 CWE-522