Wazuh

92 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-26814 Mar 06, 02:15 npm HIGH PATCH This Week

Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Path Traversal Wazuh

NVD GitHub

CVSS 3.1

8.8

EPSS

8.7%

CVE-2018-19666 Nov 29, 08:29 HIGH POC This Week

The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Microsoft Wazuh Ossec

NVD GitHub

CVSS 3.0

7.8

EPSS

0.8%

CVE-2021-26814 npm

EPSS 9% CVSS 8.8

HIGH PATCH This Week

RCE Path Traversal Wazuh

NVD GitHub

CVE-2018-19666

EPSS 1% CVSS 7.8

HIGH POC This Week

Path Traversal Microsoft Wazuh +1

NVD GitHub

Prev Page 2 of 2