Ironic Inspector

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-10141 Jul 30, 17:15 PyPI CRITICAL PATCH Act Now

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This SQL Injection vulnerability could allow attackers to execute arbitrary SQL commands against the database.

Denial Of Service SQLi Red Hat Openstack Ironic Inspector

NVD

CVSS 3.0

9.1

EPSS

2.5%

CVE-2015-5306 Nov 25, 20:59 PyPI MEDIUM PATCH This Month

OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

RCE Python Openstack Ironic Inspector

NVD

CVSS 2.0

6.8

EPSS

0.6%

CVE-2019-10141 PyPI

EPSS 2% CVSS 9.1

CRITICAL PATCH Act Now

Denial Of Service SQLi Red Hat +2

NVD

CVE-2015-5306 PyPI

EPSS 1% CVSS 6.8

MEDIUM PATCH This Month

RCE Python Openstack +1

NVD