25 matches found
Code injection
Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...
4.3CVSS6.2AI score0.00641EPSS
SaveExploits0References1Affected Software1
CVE-2019-19394: Improper Neutralization of Input During Web Page Generation
Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...
6.1CVSS6.4AI score0.00641EPSS
SaveExploits0References2
CVE-2019-9929
Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...
9CVSS7.7AI score0.01985EPSS
SaveExploits1References3
20