CP
Product
Cpanel
On CISA KEVExploited in the wildRansomware-linked
421
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 104Medium 210Low 53
Watch
Add Cpanel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-20942 | 2.5 | Aug 1 | cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon configuring crontab (SEC-351) Affected: 61.9999.55 before 62.0.39; 65.9999.38 before 66.0.35; 67.9999.64 before 68.0.27 |
| CVE-2018-20893 | 2.3 | Aug 1 | cPanel before 74.0.0 allows file-rename operations during account renames (SEC-442) Affected: 69.9999.122 before 70.0.53; 71.9980.30 before 72.0.10; 73.9980.0 before 74.0.0 |
| CVE-2017-18392 | 2.0 | Aug 2 | cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts (SEC-325) Affected: 63.9999.74 before 64.0.42; 65.9999.38 before 66.0.34; 67.9999.64 before 68.0.15 |