375 matches found
CVE-2025-22233 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, thingsboard, apache-nifi-registry, apache-nifi...
GHSA-4WP7-92PW-Q264 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, thingsboard, apache-nifi-registry, apache-nifi...
GHSA-4WP7-92PW-Q264 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, apache-nifi, keycloak-config-cli, thingsboard, jenkins...
CVE-2025-22233 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, apache-nifi, keycloak-config-cli, thingsboard, jenkins...
CVE-2025-46701 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-H2FW-RFH5-95R3 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-H2FW-RFH5-95R3 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2025-46701 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2025-4949 vulnerabilities
Vulnerabilities for packages: apicurio-registry, nextflow, thingsboard, wildfly, gradle, sonarqube-10, apache-nifi-registry...
GHSA-VRPQ-QP53-QV56 vulnerabilities
Vulnerabilities for packages: apicurio-registry, nextflow, thingsboard, wildfly, gradle, sonarqube-10, apache-nifi-registry...
CVE-2025-4949 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, gradle, apicurio-registry, wildfly, thingsboard, nextflow, sonarqube-10...
GHSA-VRPQ-QP53-QV56 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, gradle, apicurio-registry, wildfly, thingsboard, nextflow, sonarqube-10...
CVE-2024-9358
A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP RPC API. The manipulation leads to resource consumption. The attack can be launched remotely. The complexity of an attack is...
CVE-2024-3270
A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...
CVE-2023-26462
ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials usable for privilege escalation are stored in an insecure format. To read this stored data, the attacker needs access to the application server or its source code...
CVE-2022-48341
ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Administrator can obtain System Administrator dashboard access by modifying the scope via the scopes parameter...
CVE-2022-40004
Cross Site Scripting XSS vulnerability in Things Board 3.4.1 allows remote attackers to escalate privilege via crafted URL to the Audit Log...
CVE-2022-45608
An issue was discovered in ThingsBoard 3.4.1, allows low privileged attackers CUSTOMERUSER to gain escalated privileges vertically and become an Administrator TENANTADMIN or SYSADMIN on the web application. It is important to note that in order to accomplish this, the attacker must know the...