Monitorix

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3325 Jan 27, 19:15 CRITICAL POC PATCH Act Now

Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installation without a hosts_deny option). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Fedora Monitorix Fedoraproject Fibranet

NVD GitHub

CVSS 3.1

9.8

EPSS

2.2%

CVE-2018-7649 Aug 02, 17:29 MEDIUM This Month

Monitorix before 3.10.1 allows XSS via CGI variables. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Monitorix Fibranet

NVD

CVSS 3.0

6.1

EPSS

0.6%

CVE-2021-3325

EPSS 2% CVSS 9.8

CRITICAL POC PATCH Act Now

Authentication Bypass Fedora Monitorix +2

NVD GitHub

CVE-2018-7649

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS Monitorix Fibranet

NVD