Untangle
Untangle NG Firewall: vulnerabilidades y CVE
Untangle NG Firewall tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-18649 | Media (4.8) | 0.52% | — | 14 nov 2019 | When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS. |
| CVE-2019-18648 | Media (4.8) | 0.52% | — | 14 nov 2019 | When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields. |
| CVE-2019-18647 | Alta (7.2) | 1.9% | — | 14 nov 2019 | The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user. |
| CVE-2019-18646 | Alta (7.2) | 0.91% | — | 14 nov 2019 | The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when logged in as an admin user. |