ME
Product
Mesos
by Apache · last CVE Mar 25, 2019
9
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch

Add Mesos to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1000421
6.5
1%
Jan 9
An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to initiate a test…
Affected: through 0.17.1
CVE-2018-1000420
6.5
1%
Jan 9
An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to obtain credentials…
Affected: through 0.17.1
CVE-2018-8023
5.9
3%
Sep 21
Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT)
Affected: before 1.4.2; 1.5.0; 1.5.1; 1.6.0
Showing 3