Vulnerabilities
7 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2022-33977 +1 in the same advisory: …31471 | untangle is a python library to convert XML data to python objects. untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running. NVD description · AI analysis pending | 7.5 | 2% |
| — | ||
| CVE-2020-17494 | Untangle Firewall NG before 16.0 uses MD5 for passwords. Untangle Firewall NG before 16.0 uses MD5 for passwords. NVD description · AI analysis pending | 5.3 | <1% |
| — | ||
| CVE-2019-18647 | The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user. The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user. NVD description · AI analysis pending | 7.2 group max | 2% |
| — |