Known Vulnerabilities for products from Mitre
Listed below are 14 of the newest known vulnerabilities associated with the vendor "Mitre".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-82477 json | Not Provided | 2026-08-29 | 2026-08-29 | |
| CVE-2026-77710 json | Not Provided | 2026-08-21 | 2026-08-21 | |
| CVE-2026-74764 json | Not Provided | 2026-08-15 | 2026-08-17 | |
| CVE-2026-58054 json | Not Provided | 2026-06-28 | 2026-07-24 | |
| CVE-2025-71346 json | Not Provided | 2026-08-25 | 2026-08-25 | |
| CVE-2022-41139 json | MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution o... | 5.4 - MEDIUM | 2022-10-17 | 2022-10-19 |
| CVE-2022-40606 json | MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different v... | 6.1 - MEDIUM | 2022-10-17 | 2022-10-19 |
| CVE-2022-40605 json | MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different v... | 6.1 - MEDIUM | 2022-10-17 | 2022-10-19 |
| CVE-2022-31004 json | CVEProject/cve-services is an open source project used to operate the CVE services API. A conditional in 'data.js' has potent... | 7.5 - HIGH | 2022-06-02 | 2022-06-10 |
| CVE-2021-46561 json | controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 all... | 7.2 - HIGH | 2022-01-26 | 2022-07-12 |
| CVE-2021-42562 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.1 - HIGH | 2022-01-12 | 2022-07-12 |
| CVE-2021-42561 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2022-01-12 | 2022-07-12 |
| CVE-2021-42560 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2022-01-12 | 2022-01-15 |
| CVE-2021-42559 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2022-01-12 | 2022-01-19 |
| CVE-2021-42558 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.1 - MEDIUM | 2022-01-12 | 2022-01-19 |
| CVE-2020-19907 json | A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execut... | 8.8 - HIGH | 2021-07-12 | 2022-10-18 |
| CVE-2020-14462 json | CALDERA 2.7.0 allows XSS via the Operation Name box. | 5.4 - MEDIUM | 2020-06-19 | 2020-06-19 |
| CVE-2020-10807 json | auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in the ... | 5.3 - MEDIUM | 2020-03-22 | 2021-07-21 |
| CVE-2008-4704 json | PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arbitrar... | Not Provided | 2008-10-23 | 2026-04-23 |
Known software with vulnerabilities from Mitre
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Mitre | Caldera | 2.0.0 |
| Application | Mitre | Risk Radar | 1.0.0 |