Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Mmonit Clear all filters
TI-2019-08549 CVE-2019-11454 · GHSA-8hqm-hwvr-wgv7

Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3…

Priority LOW 32

Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introduce arbitrary JavaScript via manipulation of an unsanitized user field of the Au…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02414 Published 2019-04-22 No fix listed CWE-79
TI-2014-05455 CVE-2014-6607 · GHSA-3fgg-2gjx-mcfm

M/Monit 3.3.2 and earlier does not verify the original password before changing…

Priority MEDIUM 42

M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06647 Published 2014-10-06 No fix listed CWE-255
TI-2014-05265 CVE-2014-6409 · GHSA-8j2v-g6c3-rfrm

Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows…

Priority LOW 34

Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that change user passwords via the fullname and password pa…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02268 Published 2014-10-06 No fix listed CWE-352