Skip to content
Noroxi

packetfence records

5 published records for vendor packetfence.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2011-4069
    39Monitor

    html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentic

    CriticalCVSS 9.8No exploitEPSS 1%

    packetfence · packetfenceFeb 1, 2018

  • CVE-2011-4068
    39Monitor

    The check_password function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empt

    CriticalCVSS 9.8No exploitEPSS 1%

    packetfence · packetfenceFeb 1, 2018

  • CVE-2012-4742
    31Monitor

    The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary code via unspecified

    HighCVSS 7.5No exploitEPSS 2%

    packetfence · packetfenceAug 31, 2012

  • CVE-2012-4741
    20Monitor

    The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users with custom VLAN assig

    MediumCVSS 5.0No exploitEPSS 1%

    packetfence · packetfenceAug 31, 2012

  • CVE-2012-4740
    17Monitor

    Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attackers to inject arbitrary web s

    MediumCVSS 4.3No exploitEPSS 1%

    packetfence · packetfenceAug 31, 2012