vantage6 records

18 published records for vendor vantage6.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 94.4%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

18 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-21653No exploit	vantage6 insecure SSH configuration for node and server containersvantage6 · vantage6 · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Jan 30, 2024
35Monitor	CVE-2024-21649No exploit	Remote code executionvantage6 · vantage6 · CWE-94 RCE	High8.8	—	1.3%	Jan 30, 2024
35Monitor	CVE-2023-23929No exploit	Refresh tokens do not expire in Vantage6vantage6 · vantage6 · CWE-613	High8.8	—	0.6%	Mar 3, 2023
35Monitor	CVE-2023-47631No exploit	vantage6 Node accepts non-whitelisted algorithms from malicious servervantage6 · vantage6 · CWE-345	High8.8	—	0.4%	Nov 14, 2023
28Monitor	CVE-2023-23930No exploit	vantage6's Pickle serialization is insecurevantage6 · vantage6 · CWE-502 Deserialization	High7.2	—	1.1%	Oct 11, 2023
26Monitor	CVE-2022-39228No exploit	Observable Response Discrepancy in vantage6vantage6 · vantage6 · CWE-203 Pre-auth	Medium6.5	—	0.6%	Mar 1, 2023
26Monitor	CVE-2023-22738No exploit	Improper Preservation of Permissions in vantage6vantage6 · vantage6 · CWE-281	Medium6.5	—	0.4%	Mar 1, 2023
26Monitor	CVE-2024-23823No exploit	CORS settings overly permissive in vantage6vantage6 · vantage6 · CWE-863 Pre-auth Broken access control (IDOR)	Medium6.5	—	0.3%	Mar 14, 2024
21Monitor	CVE-2023-28635No exploit	Defining resource name as integer in vantage6 may give unintended accessvantage6 · vantage6 · CWE-863 Broken access control (IDOR)	Medium5.4	—	0.5%	Oct 11, 2023
21Monitor	CVE-2024-24770No exploit	Username timing attack on recover password/MFA token in vantage6vantage6 · vantage6 · CWE-208 Pre-auth	Medium5.3	—	0.4%	Mar 14, 2024
21Monitor	CVE-2024-24562No exploit	Security headers not set in vantage6-UIvantage6 · vantage6-ui · CWE-668 Pre-auth	Medium5.3	—	0.3%	Mar 14, 2024
21Monitor	CVE-2024-22200No exploit	vantage6-UI docker image leaks software version informationvantage6 · vantage6-ui · CWE-200 Pre-auth Info leak	Medium5.3	—	0.3%	Jan 30, 2024
17Monitor	CVE-2023-41882No exploit	vantage6 Improper Access Control vulnerabilityvantage6 · vantage6 · CWE-284 Broken access control (IDOR)	Medium4.3	—	0.5%	Oct 11, 2023
17Monitor	CVE-2023-41881No exploit	Deleting a collaboration should also delete linked resourcesvantage6 · vantage6 · CWE-200 Info leak	Medium4.3	—	0.4%	Oct 11, 2023
17Monitor	CVE-2024-22193No exploit	vantage6 unencrypted task can be created in encrypted collaborationvantage6 · vantage6 · CWE-922	Medium4.3	—	0.3%	Jan 30, 2024
14Monitor	CVE-2024-21671No exploit	vantage6 username timing attackvantage6 · vantage6 · CWE-208 Pre-auth	Low3.7	—	0.4%	Jan 30, 2024
6Monitor	CVE-2025-43863No exploit	vantage6 lacks brute-force protection on change password functionalityvantage6 · vantage6 · CWE-307 Pre-auth	Low1.7	—	0.5%	Jun 12, 2025
6Monitor	CVE-2025-43866No exploit	Vantage6 Server JWT secret not cryptographically securevantage6 · vantage6 · CWE-330 Pre-auth Weak crypto	Low1.7	—	0.4%	Jun 12, 2025

CVE-2024-21653
39Monitor
vantage6 insecure SSH configuration for node and server containers
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
vantage6 · vantage6Jan 30, 2024
CVE-2024-21649
35Monitor
Remote code execution
HighCVSS 8.8No exploitEPSS 1%
- RCE
vantage6 · vantage6Jan 30, 2024
CVE-2023-23929
35Monitor
Refresh tokens do not expire in Vantage6
HighCVSS 8.8No exploitEPSS 1%
vantage6 · vantage6Mar 3, 2023
CVE-2023-47631
35Monitor
vantage6 Node accepts non-whitelisted algorithms from malicious server
HighCVSS 8.8No exploitEPSS 0%
vantage6 · vantage6Nov 14, 2023
CVE-2023-23930
28Monitor
vantage6's Pickle serialization is insecure
HighCVSS 7.2No exploitEPSS 1%
- Deserialization
vantage6 · vantage6Oct 11, 2023
CVE-2022-39228
26Monitor
Observable Response Discrepancy in vantage6
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
vantage6 · vantage6Mar 1, 2023
CVE-2023-22738
26Monitor
Improper Preservation of Permissions in vantage6
MediumCVSS 6.5No exploitEPSS 0%
vantage6 · vantage6Mar 1, 2023
CVE-2024-23823
26Monitor
CORS settings overly permissive in vantage6
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
vantage6 · vantage6Mar 14, 2024
CVE-2023-28635
21Monitor
Defining resource name as integer in vantage6 may give unintended access
MediumCVSS 5.4No exploitEPSS 1%
- Broken access control (IDOR)
vantage6 · vantage6Oct 11, 2023
CVE-2024-24770
21Monitor
Username timing attack on recover password/MFA token in vantage6
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
vantage6 · vantage6Mar 14, 2024
CVE-2024-24562
21Monitor
Security headers not set in vantage6-UI
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
vantage6 · vantage6-uiMar 14, 2024
CVE-2024-22200
21Monitor
vantage6-UI docker image leaks software version information
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Info leak
vantage6 · vantage6-uiJan 30, 2024
CVE-2023-41882
17Monitor
vantage6 Improper Access Control vulnerability
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
vantage6 · vantage6Oct 11, 2023
CVE-2023-41881
17Monitor
Deleting a collaboration should also delete linked resources
MediumCVSS 4.3No exploitEPSS 0%
- Info leak
vantage6 · vantage6Oct 11, 2023
CVE-2024-22193
17Monitor
vantage6 unencrypted task can be created in encrypted collaboration
MediumCVSS 4.3No exploitEPSS 0%
vantage6 · vantage6Jan 30, 2024
CVE-2024-21671
14Monitor
vantage6 username timing attack
LowCVSS 3.7No exploitEPSS 0%
- Pre-auth
vantage6 · vantage6Jan 30, 2024
CVE-2025-43863
6Monitor
vantage6 lacks brute-force protection on change password functionality
LowCVSS 1.7No exploitEPSS 0%
- Pre-auth
vantage6 · vantage6Jun 12, 2025
CVE-2025-43866
6Monitor
Vantage6 Server JWT secret not cryptographically secure
LowCVSS 1.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
vantage6 · vantage6Jun 12, 2025