CO
Product
Contrail
2
CVEs
0
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add Contrail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-10616 | 5.3 | Oct 13 | The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials Affected: 2.2; 3.0; 3.1; 3.2 |
| CVE-2017-10617 | 5.0 | Oct 13 | The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files Affected: 2.2 before 2.21.4; 3.0 before 3.0.3.4; 3.1 before 3.1.4.0; 3.2 before 3.2.5.0 |
Showing 2
