Login Request a demo
OP
Product
Openmct
by Nasa · last CVE Nov 9, 2023
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 1Medium 5Low 0
Severity
All severities6Critical0High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Openmct to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-45282
7.5
1%
Oct 6
In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action
Affected: before 3.1.0
CVE-2023-45884
6.5
0%
Nov 9
Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin
Affected: through 3.1.0
CVE-2022-23054
6.1
1%
Feb 20
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field
Affected: 1.3.0 through 1.7.7
CVE-2022-23053
6.1
1%
Feb 20
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field
Affected: 1.3.0 through 1.7.7
CVE-2022-22126
6.1
1%
Feb 20
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field
Affected: 1.3.0 through 1.7.7
CVE-2023-45885
5.4
0%
Nov 9
Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout…
Affected: through 3.1.0
Showing 6