DM
Product
DANZ Monitoring Fabric
5
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add DANZ Monitoring Fabric to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54545 | 7.8 | Oct 29 | On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges. Affected: 0; through DMF 8.6.1; through DMF 8.5.2; through CCF 6.2.4; through CVA 7.0; through MCD 2.4.0 |
| CVE-2025-54546 | 7.5 | Oct 29 | On affected platforms, restricted users could use SSH port forwarding to access host-internal services Affected: 0; through DMF 8.6.1; through DMF 8.5.2; through CCF 6.2.4; through CVA 7.0; through MCD 2.4.0 |
| CVE-2025-54549 | 5.9 | Oct 29 | Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO Affected: 0; through DMF 8.6.1; through DMF 8.5.2; through CCF 6.2.4; through CVA 7.0; through MCD 2.4.0 |
| CVE-2025-54547 | 5.3 | Oct 29 | On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired Affected: 0; through DMF 8.6.1; through DMF 8.5.2; through CCF 6.2.4; through CVA 7.0; through MCD 2.4.0 |
| CVE-2025-54548 | 4.3 | Oct 29 | On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes) Affected: 0; through DMF 8.6.1; through DMF 8.5.2; through CCF 6.2.4; through CVA 7.0; through MCD 2.4.0 |
Showing 5