İçeriğe atla
Noroxi

northern.tech kayıtları

northern.tech üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%33,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2022-29556
    39İzleyin

    The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF because the Azure IoT Hub integration provide

    KritikCVSS 9,8İstismar yokEPSS %1

    northern.tech · mender28 Nis 2022

  • CVE-2024-37019
    39İzleyin

    Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication.

    KritikCVSS 9,8İstismar yokEPSS %0

    3 Haz 2024

  • CVE-2022-29555
    35İzleyin

    The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2.

    YüksekCVSS 8,8İstismar yokEPSS %0

    northern.tech · mender28 Nis 2022

  • CVE-2022-45929
    35İzleyin

    Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change

    YüksekCVSS 8,8İstismar yokEPSS %0

    20 Haz 2024

  • CVE-2021-35342
    30İzleyin

    The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x befo

    YüksekCVSS 7,5İstismar yokEPSS %1

    northern.tech · useradm27 Ağu 2021

  • CVE-2023-45684
    30İzleyin

    Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection.

    YüksekCVSS 7,5İstismar yokEPSS %0

    northern.tech · cfengine14 Kas 2023

  • CVE-2026-24712
    29İzleyin

    Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection.

    YüksekCVSS 7,3İstismar yokEPSS %0

    northern.tech · cfengine14 May 2026

  • CVE-2023-26560
    26İzleyin

    Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports feature to read arb

    OrtaCVSS 6,5İstismar yokEPSS %0

    northern.tech · cfengine25 Nis 2023

  • CVE-2021-36756
    26İzleyin

    CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation.

    OrtaCVSS 6,5İstismar yokEPSS %0

    northern.tech · cfengine27 Eki 2021

  • CVE-2024-46947
    26İzleyin

    Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF.

    OrtaCVSS 6,5İstismar yokEPSS %0

    8 Kas 2024

  • CVE-2019-19394
    24İzleyin

    Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS.

    OrtaCVSS 6,1İstismar yokEPSS %0

    northern.tech · cfengine16 Nis 2020

  • CVE-2026-24710
    24İzleyin

    Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS.

    OrtaCVSS 6,1İstismar yokEPSS %0

    northern.tech · cfengine14 May 2026

  • CVE-2021-44216
    22İzleyin

    Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to

    OrtaCVSS 5,5İstismar yokEPSS %0

    northern.tech · cfengine10 Mar 2022

  • CVE-2021-44215
    22İzleyin

    Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecifi

    OrtaCVSS 5,5İstismar yokEPSS %0

    northern.tech · cfengine10 Mar 2022

  • CVE-2021-38379
    22İzleyin

    The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure.

    OrtaCVSS 5,5İstismar yokEPSS %0

    northern.tech · cfengine27 Eki 2021

  • CVE-2026-24711
    21İzleyin

    Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 has Incorrect Access Control.

    OrtaCVSS 5,3İstismar yokEPSS %0

    northern.tech · cfengine14 May 2026

  • CVE-2024-46948
    17İzleyin

    Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.

    OrtaCVSS 4,3İstismar yokEPSS %0

    northern.tech · mender8 Kas 2024

  • CVE-2022-32290
    17İzleyin

    The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control.

    OrtaCVSS 4,3İstismar yokEPSS %0

    northern.tech · mender6 Tem 2022