hawt kayıtları
hawt üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %50
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-209 Generation of Error Message Containing Sensitive Information1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-20 Improper Input Validation1
- CWE-287 Improper Authentication1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
47Planlayın | CVE-2019-9827İstismar yok | Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrahawt · hawtio · CWE-918 | Kritik9,8 | — | %26,8 | 3 Tem 2019 |
40Planlayın | CVE-2014-0121İstismar yok | The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k paramethawt · hawtio · CWE-287 | Kritik9,8 | — | %3,9 | 29 Ara 2017 |
36İzleyin | CVE-2017-2589İstismar yok | It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies arhawt · hawtio · CWE-285 | Kritik9,0 | — | %0,9 | 26 Tem 2018 |
35İzleyin | CVE-2014-0120İstismar yok | Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbhawt · hawtio · CWE-352 | Yüksek8,8 | — | %1,1 | 29 Ara 2017 |
35İzleyin | CVE-2017-7556İstismar yok | Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their wehawt · hawtio · CWE-352 | Yüksek8,8 | — | %0,6 | 17 Ağu 2017 |
32İzleyin | CVE-2017-2617İstismar yok | hawtio before version 1.5.5 is vulnerable to remote code execution via file upload.hawt · hawtio · CWE-20 | Yüksek7,8 | — | %1,6 | 22 May 2018 |
31İzleyin | CVE-2017-2594İstismar yok | hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerEhawt · hawtio · CWE-209 | Yüksek7,5 | — | %1,8 | 8 May 2018 |
22İzleyin | CVE-2023-33544İstismar yok | hawtio 2.17.2 is vulnerable to Path Traversal.hawt · hawtio · CWE-22 | Orta5,5 | — | %0,3 | 1 Haz 2023 |
- CVE-2019-982747Planlayın
Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitra
KritikCVSS 9,8İstismar yokEPSS %26hawt · hawtio3 Tem 2019
- CVE-2014-012140Planlayın
The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k paramet
KritikCVSS 9,8İstismar yokEPSS %3hawt · hawtio29 Ara 2017
- CVE-2017-258936İzleyin
It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies ar
KritikCVSS 9,0İstismar yokEPSS %0hawt · hawtio26 Tem 2018
- CVE-2014-012035İzleyin
Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arb
YüksekCVSS 8,8İstismar yokEPSS %1hawt · hawtio29 Ara 2017
- CVE-2017-755635İzleyin
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their we
YüksekCVSS 8,8İstismar yokEPSS %0hawt · hawtio17 Ağu 2017
- CVE-2017-261732İzleyin
hawtio before version 1.5.5 is vulnerable to remote code execution via file upload.
YüksekCVSS 7,8İstismar yokEPSS %1hawt · hawtio22 May 2018
- CVE-2017-259431İzleyin
hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerE
YüksekCVSS 7,5İstismar yokEPSS %1hawt · hawtio8 May 2018
- CVE-2023-3354422İzleyin
hawtio 2.17.2 is vulnerable to Path Traversal.
OrtaCVSS 5,5İstismar yokEPSS %0hawt · hawtio1 Haz 2023