Plesk kayıtları
plesk üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-281 Improper Preservation of Permissions1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-668 Exposure of Resource to Wrong Sphere1
- CWE-427 Uncontrolled Search Path Element1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2021-45008Kavram kanıtı | Plesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege Escalation from user to admin rights.plesk · plesk · CWE-281 | Yüksek8,8 | — | %2,0 | 21 Şub 2022 |
36İzleyin | CVE-2023-0829İstismar yok | Cross-Site Scripting (XSS) vulnerability in Pleskplesk · plesk · CWE-79 | Kritik9,0 | — | %0,6 | 20 Eyl 2023 |
36İzleyin | CVE-2025-66430İstismar yok | Plesk 18.0 has Incorrect Access Control.plesk · plesk · CWE-284 | Kritik9,1 | — | %0,6 | 12 Ara 2025 |
31İzleyin | CVE-2023-4931İstismar yok | Uncontrolled search path element vulnerability in Pleskplesk · plesk · CWE-427 | Yüksek7,8 | — | %0,2 | 27 Kas 2023 |
30İzleyin | CVE-2023-43784İstismar yok | Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component.plesk · onyx · CWE-668 | Yüksek7,5 | — | %0,6 | 22 Eyl 2023 |
26İzleyin | CVE-2021-45007Kavram kanıtı | Plesk 18.0.37 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows an attacker to insert data on the user and admin plesk · plesk · CWE-352 | Orta6,5 | — | %0,7 | 20 Şub 2022 |
26İzleyin | CVE-2022-45130İstismar yok | Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an Admin password.plesk · obsidian · CWE-352 | Orta6,5 | — | %0,4 | 10 Kas 2022 |
25İzleyin | CVE-2023-24044Kavram kanıtı | A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites vplesk · obsidian · CWE-601 | Orta6,1 | — | %2,3 | 21 Oca 2023 |
24İzleyin | CVE-2021-35976İstismar yok | The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0.32 on Linux is vulnerable to reflected XSS via the /plesk-site-previeplesk · obsidian · CWE-79 | Orta6,1 | — | %1,1 | 10 Eyl 2021 |
24İzleyin | CVE-2020-11583İstismar yok | A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, plesk · obsidian · CWE-79 | Orta6,1 | — | %1,0 | 3 Ağu 2020 |
24İzleyin | CVE-2020-11584İstismar yok | A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or Cplesk · onyx · CWE-79 | Orta6,1 | — | %0,9 | 3 Ağu 2020 |
20İzleyin | CVE-2001-1222İstismar yok | Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP addresplesk · plesk server administrator | Orta5,0 | — | %1,6 | 25 Mar 2002 |
- CVE-2021-4500836İzleyin
Plesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege Escalation from user to admin rights.
YüksekCVSS 8,8Kavram kanıtıEPSS %2plesk · plesk21 Şub 2022
- CVE-2023-082936İzleyin
Cross-Site Scripting (XSS) vulnerability in Plesk
KritikCVSS 9,0İstismar yokEPSS %1plesk · plesk20 Eyl 2023
- CVE-2025-6643036İzleyin
Plesk 18.0 has Incorrect Access Control.
KritikCVSS 9,1İstismar yokEPSS %1plesk · plesk12 Ara 2025
- CVE-2023-493131İzleyin
Uncontrolled search path element vulnerability in Plesk
YüksekCVSS 7,8İstismar yokEPSS %0plesk · plesk27 Kas 2023
- CVE-2023-4378430İzleyin
Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component.
YüksekCVSS 7,5İstismar yokEPSS %1plesk · onyx22 Eyl 2023
- CVE-2021-4500726İzleyin
Plesk 18.0.37 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows an attacker to insert data on the user and admin
OrtaCVSS 6,5Kavram kanıtıEPSS %1plesk · plesk20 Şub 2022
- CVE-2022-4513026İzleyin
Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an Admin password.
OrtaCVSS 6,5İstismar yokEPSS %0plesk · obsidian10 Kas 2022
- CVE-2023-2404425İzleyin
A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites v
OrtaCVSS 6,1Kavram kanıtıEPSS %2plesk · obsidian21 Oca 2023
- CVE-2021-3597624İzleyin
The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0.32 on Linux is vulnerable to reflected XSS via the /plesk-site-previe
OrtaCVSS 6,1İstismar yokEPSS %1plesk · obsidian10 Eyl 2021
- CVE-2020-1158324İzleyin
A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML,
OrtaCVSS 6,1İstismar yokEPSS %1plesk · obsidian3 Ağu 2020
- CVE-2020-1158424İzleyin
A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or C
OrtaCVSS 6,1İstismar yokEPSS %1plesk · onyx3 Ağu 2020
- CVE-2001-122220İzleyin
Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP addres
OrtaCVSS 5,0İstismar yokEPSS %2plesk · plesk server administrator25 Mar 2002