Skip to content
Noroxi

northern.tech records

18 published records for vendor northern.tech.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
33.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2022-29556
    39Monitor

    The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF because the Azure IoT Hub integration provide

    CriticalCVSS 9.8No exploitEPSS 1%

    northern.tech · menderApr 28, 2022

  • CVE-2024-37019
    39Monitor

    Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication.

    CriticalCVSS 9.8No exploitEPSS 0%

    Jun 3, 2024

  • CVE-2022-29555
    35Monitor

    The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2.

    HighCVSS 8.8No exploitEPSS 0%

    northern.tech · menderApr 28, 2022

  • CVE-2022-45929
    35Monitor

    Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change

    HighCVSS 8.8No exploitEPSS 0%

    Jun 20, 2024

  • CVE-2021-35342
    30Monitor

    The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x befo

    HighCVSS 7.5No exploitEPSS 1%

    northern.tech · useradmAug 27, 2021

  • CVE-2023-45684
    30Monitor

    Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection.

    HighCVSS 7.5No exploitEPSS 0%

    northern.tech · cfengineNov 14, 2023

  • CVE-2026-24712
    29Monitor

    Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection.

    HighCVSS 7.3No exploitEPSS 0%

    northern.tech · cfengineMay 14, 2026

  • CVE-2023-26560
    26Monitor

    Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports feature to read arb

    MediumCVSS 6.5No exploitEPSS 0%

    northern.tech · cfengineApr 25, 2023

  • CVE-2021-36756
    26Monitor

    CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation.

    MediumCVSS 6.5No exploitEPSS 0%

    northern.tech · cfengineOct 27, 2021

  • CVE-2024-46947
    26Monitor

    Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF.

    MediumCVSS 6.5No exploitEPSS 0%

    Nov 8, 2024

  • CVE-2019-19394
    24Monitor

    Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS.

    MediumCVSS 6.1No exploitEPSS 0%

    northern.tech · cfengineApr 16, 2020

  • CVE-2026-24710
    24Monitor

    Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS.

    MediumCVSS 6.1No exploitEPSS 0%

    northern.tech · cfengineMay 14, 2026

  • CVE-2021-44216
    22Monitor

    Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to

    MediumCVSS 5.5No exploitEPSS 0%

    northern.tech · cfengineMar 10, 2022

  • CVE-2021-44215
    22Monitor

    Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecifi

    MediumCVSS 5.5No exploitEPSS 0%

    northern.tech · cfengineMar 10, 2022

  • CVE-2021-38379
    22Monitor

    The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure.

    MediumCVSS 5.5No exploitEPSS 0%

    northern.tech · cfengineOct 27, 2021

  • CVE-2026-24711
    21Monitor

    Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 has Incorrect Access Control.

    MediumCVSS 5.3No exploitEPSS 0%

    northern.tech · cfengineMay 14, 2026

  • CVE-2024-46948
    17Monitor

    Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.

    MediumCVSS 4.3No exploitEPSS 0%

    northern.tech · menderNov 8, 2024

  • CVE-2022-32290
    17Monitor

    The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control.

    MediumCVSS 4.3No exploitEPSS 0%

    northern.tech · menderJul 6, 2022