Vulnerabilities

TI-2024-15151 CVE-2024-22854 · GHSA-xmmg-4cv8-23px

DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer…

MEDIUM 60

DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 (bundle version 61050) and before has been identified.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00396 Published 2024-02-16 No fix listed CWE-601

TI-2023-13958 CVE-2023-29656 · GHSA-83q5-ph4f-qx3w

An improper authorization vulnerability in Darktrace mobile app (Android) prior to…

MEDIUM 60

An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actions(block/unblock traffic) from the mobile application.

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.00273 Published 2023-07-06 No fix listed CWE-863

TI-2019-07015 CVE-2019-9597 · GHSA-w9r4-94cp-54w6

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint.

LOW 31

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00978 Published 2019-10-23 No fix listed CWE-352

TI-2019-07014 CVE-2019-9596 · GHSA-667w-x292-xmxh

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint.

LOW 32

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0162 Published 2019-10-23 No fix listed CWE-352

Vulnerabilities

Filters

DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer…

An improper authorization vulnerability in Darktrace mobile app (Android) prior to…

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint.

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint.