FR
Product
Frontend
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 11Low 0
Watch
Add Frontend to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49643 | 6.5 | Dec 1 | Frontend DoS vulnerability due to asymmetric resource consumption Affected: 6.0.0 before 6.0.42; 7.0.0 before 7.0.19; 7.2.0 before 7.2.13; 7.4.0 before 7.4.3 |
| CVE-2023-30958 | 6.1 | Aug 3 | DOM XSS in Developer mode dashboard via redirect GET parameter Affected: before 6.225.0 |
| CVE-2023-29457 | 6.1 | Jul 13 | Insufficient validation of Action form input fields Affected: 4.0.0 through 4.0.45; 5.0.0 through 5.0.34; 6.0.0 through 6.0.17 |
| CVE-2023-29455 | 6.1 | Jul 13 | Reflected XSS in several fields of graph form Affected: 4.0.0 through 4.0.45; 5.0.0 through 5.0.33 |
| CVE-2023-29456 | 5.4 | Jul 13 | Inefficient URL schema validation Affected: 4.0.0 through 4.0.46; 5.0.0 through 5.0.35; 6.0.0 through 6.0.18; 6.4.0 through 6.4.3 |
| CVE-2023-29454 | 5.4 | Jul 13 | Persistent XSS in the user form Affected: 4.0.0 through 4.0.45; 5.0.0 through 5.0.33; 6.0.0 through 6.0.16 |
| CVE-2025-27232 | 4.9 | Dec 1 | Frontend arbitrary file read in oauth.authorize action Affected: 7.4.0 before 7.4.3 |
| CVE-2022-24919 | 4.4 | Mar 9 | An authenticated user can create a link with reflected Javascript code inside it for graphs’ page and send it to other users Affected: 4.0.0 through 4.0.38; 5.0.0 through 5.0.20; 5.4.0 through 5.4.10; 6.0.0 |
| CVE-2022-24918 | 4.4 | Mar 9 | An authenticated user can create a link with reflected Javascript code inside it for items’ page and send it to other users Affected: 5.0.0 through 5.0.20; 5.4.0 through 5.4.10; 6.0.0 |
| CVE-2022-24917 | 4.4 | Mar 9 | An authenticated user can create a link with reflected Javascript code inside it for services’ page and send it to other users Affected: 4.0.0 through 4.0.38; 5.0.0 through 5.0.20; 5.4.0 through 5.4.10; 6.0.0 |
| CVE-2022-24349 | 4.4 | Mar 9 | An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users Affected: 4.0.0 through 4.0.38; 5.0.0 through 5.0.20; 5.4.0 through 5.4.10; 6.0.0 |
Showing 11