Login Request a demo
CO
Product
Cobbler
by Cobbler Project · last CVE Mar 11, 2022
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 4High 4Medium 2Low 0
Severity
All severities11Critical4High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cobbler to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-40323
9.8
87%
Oct 4
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection
Affected: through 3.3.0
CVE-2018-10931
9.8
68%
Aug 9
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC
Affected: 2.6.0 through 2.6.11
CVE-2017-1000469
9.8
6%
Jan 3
Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user
Affected: through 2.8.2
CVE-2022-0860
9.1
2%
Mar 11
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2
Affected: before 3.3.2
Showing 4