CRITICAL🇵🇱 Wersja polska

CVE-2019-15494

CVSS 9.8v3.0pub. 2019-08-23upd. 2024-11-21

openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • It Novum Openitcockpit

    APP
    It-Novum
    < 3.7.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SSRF
CWE
References

Related vulnerabilities

CVE-2020-10789CRITICAL9.8PL ✓same product

Command Injection w terminalu webowym openITCOCKPIT przed wersją 3.7.3

CVE-2020-10788CRITICAL9.1PL ✓same product

openITCOCKPIT: Hardcodowany klucz API dla połączeń WebSocket

CVE-2019-15490CRITICAL9.8PL ✓same product

Command Injection w openITCOCKPIT umożliwiający zdalne wykonanie kodu

CVE-2026-24893HIGH8.8same product

openITCOCKPIT is an open source monitoring tool built for different monitoring engines. openITCOCKPIT Communit...

CVE-2026-24891HIGH7.5same product

openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and...