Monitorix

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3325 CRITICAL POC PATCH Act Now

Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installation without a hosts_deny option). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Monitorix Fedora

NVD GitHub

CVSS 3.1

9.8

EPSS

2.2%

CVE-2018-7649 MEDIUM This Month

Monitorix before 3.10.1 allows XSS via CGI variables. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Monitorix

NVD

CVSS 3.0

6.1

EPSS

0.6%

CVE-2021-3325

EPSS 2% CVSS 9.8

CRITICAL POC PATCH Act Now

Authentication Bypass Monitorix Fedora

NVD GitHub

CVE-2018-7649

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS Monitorix

NVD