LP
Product
LPAR2RRD
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 3Medium 2Low 0
Watch
Add LPAR2RRD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-42371 | 9.8 | Nov 8 | lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30 Affected: before 7.30 |
| CVE-2020-24032 | 9.8 | Aug 18 | tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone Affected: 2.7.0 |
| CVE-2014-4981 | 9.8 | Feb 17 | LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters Affected: through 3.50 |
| CVE-2014-4982 | 9.8 | Jan 10 | LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server Affected: through 3.50; 4.00 through 4.53 |
| CVE-2025-54769 | 8.8 | Jul 28 | KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal Affected: 8.04 |
| CVE-2021-42372 | 8.8 | Nov 8 | A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as… Affected: before 7.30 |
| CVE-2021-42370 | 7.5 | Nov 8 | A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device… Affected: 7.21 before 7.30 |
| CVE-2025-54767 | 6.5 | Jul 28 | KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service Affected: 8.04 |
| CVE-2025-54768 | 5.3 | Jul 28 | KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information Affected: 8.04 |
Showing 9
