System Manager

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-23337 LIB HIGH POC PATCH THREAT This Week

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Command Injection Code Injection Lodash Banking Corporate Lending Process Management +21

NVD GitHub

CVSS 3.1

7.2

EPSS

22.4%

CVE-2018-3721 LIB MEDIUM POC PATCH This Month

lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Lodash Active Iq Unified Manager System Manager

NVD GitHub

CVSS 3.1

6.5

EPSS

2.4%

CVE-2021-23337 LIB

EPSS 22% CVSS 7.2

HIGH POC PATCH THREAT This Week

RCE Command Injection Code Injection +23

NVD GitHub

CVE-2018-3721 LIB

EPSS 2% CVSS 6.5

MEDIUM POC PATCH This Month

Information Disclosure Lodash Active Iq Unified Manager +1

NVD GitHub