Login Request a demo
OP
Product
openmct
by nasa · last CVE Nov 9, 2023
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 1Medium 5Low 0
Severity
All severities6Critical0High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add openmct to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-45884
6.5
0%
Nov 9
Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin
Affected: through 3.1.0
CVE-2022-23054
6.1
1%
Feb 20
Openmct XSS via the “Summary Widget”
Affected: 1.7.7 through 1.7.7; 1.3.0 before 1.3.0*
CVE-2022-23053
6.1
1%
Feb 20
Openmct XSS via the “Condition Widget”
Affected: 1.7.7 through 1.7.7; 1.3.0 before 1.3.0*
CVE-2022-22126
6.1
1%
Feb 20
Openmct XSS via the “Web Page” element
Affected: 1.7.7 through 1.7.7; 1.3.0 before 1.3.0*
CVE-2023-45885
5.4
0%
Nov 9
Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout…
Affected: through 3.1.0
Showing 5