IN
Vendor
Influxdata
4
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-36640 | IN Influxdb Influxdata | 9.8 | Sep 2 | influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands |
| CVE-2020-35187 | TE Telegraf Influxdata | 9.8 | Dec 17 | The official telegraf docker images before 1.9.4-alpine (Alpine specific) contain a blank password for a root user |
| CVE-2019-20933 | IN Influxdb Influxdata | 9.8 | Nov 19 | InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka… |
| CVE-2018-17572 | IN Influxdb Influxdata | 4.8 | Mar 2 | InfluxDB 0.9.5 has Reflected XSS in the Write Data module |
