Skip to content
Noroxi

nats records

4 published records for vendor nats.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2022-24450
    35Monitor

    NATS nats-server before 2.7.2 has Incorrect Access Control.

    HighCVSS 8.8No exploitEPSS 1%

    nats · nats streaming serverFeb 7, 2022

  • CVE-2021-3127
    30Monitor

    NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled.

    HighCVSS 7.5No exploitEPSS 1%

    nats · jwt libraryMar 16, 2021

  • CVE-2023-46129
    30Monitor

    xkeys Seal encryption used fixed key for all encryption

    HighCVSS 7.5No exploitEPSS 0%

    nats · nkeysOct 30, 2023

  • CVE-2022-26652
    27Monitor

    NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams.

    MediumCVSS 6.5No exploitEPSS 2%

    nats · nats streaming serverMar 10, 2022