mmonit records
4 published records for vendor mmonit.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-255 Credentials Management Errors1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2014-6607Proof of concept | M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the passwmmonit · m\/monit · CWE-255 | High7.5 | — | 6.6% | Oct 6, 2014 |
28Monitor | CVE-2014-6409Proof of concept | Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of adminismmonit · m\/monit · CWE-352 | Medium6.8 | — | 2.2% | Oct 6, 2014 |
26Monitor | CVE-2016-7067No exploit | Monit before version 5.20.0 is vulnerable to a cross site request forgery attack.mmonit · monit · CWE-352 | Medium6.5 | — | 0.8% | Sep 10, 2018 |
25Monitor | CVE-2019-11454No exploit | Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introdmmonit · monit · CWE-79 | Medium6.1 | — | 2.4% | Apr 22, 2019 |
- CVE-2014-660732Monitor
M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the passw
HighCVSS 7.5Proof of conceptEPSS 6%mmonit · m\/monitOct 6, 2014
- CVE-2014-640928Monitor
Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of adminis
MediumCVSS 6.8Proof of conceptEPSS 2%mmonit · m\/monitOct 6, 2014
- CVE-2016-706726Monitor
Monit before version 5.20.0 is vulnerable to a cross site request forgery attack.
MediumCVSS 6.5No exploitEPSS 0%mmonit · monitSep 10, 2018
- CVE-2019-1145425Monitor
Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introd
MediumCVSS 6.1No exploitEPSS 2%mmonit · monitApr 22, 2019