Known Vulnerabilities for products from Getcockpit
Listed below are 4 of the newest known vulnerabilities associated with the vendor "Getcockpit".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-2818 json | Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2. ... | 8.8 - HIGH | 2022-08-15 | 2023-08-02 |
| CVE-2018-11471 json | Cockpit 0.5.5 has XSS via a collection, form, or region. | 5.4 - MEDIUM | 2018-05-25 | 2018-06-25 |
| CVE-2018-9302 json | SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to read a... | 9.1 - CRITICAL | 2018-05-02 | 2018-06-07 |
| CVE-2017-14611 json | SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to i... | 9.1 - CRITICAL | 2018-04-10 | 2022-08-18 |
Known software with vulnerabilities from Getcockpit
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Getcockpit | Cockpit | 0.13.0 |