Cpanel Luki w zabezpieczeniach

Oś czasu

Rodzaj

Hosting Control Software10

Produkt

cPanel WebHost Manager4
cPanel before2
cPanel WHM2
cPanel R6400v22
cPanel R6700v32

Przeciwdziałanie

Official Fix6
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

Wykorzystywanie

High0
Functional0
Proof-of-Concept4
Unproven0
Not Defined6

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent2
Network8

Uwierzytelnianie

Not Defined0
High0
Low6
None4

Interakcja z użytkownikiem

Not Defined0
Required6
None4

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤62
≤74
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤52
≤62
≤74
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤42
≤52
≤62
≤74
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k2
<2k8
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Affected Products (9): Hudson (1), Protect (1), R6400v2 (1), R6700v3 (1), R7900 (1), R8000 (1), WHM (1), WebHost Manager (5), before (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2022-07-197.67.5cPanel Hudson XML External EntityHosting Control SoftwareNot DefinedOfficial Fix0.002900.03CVE-2015-8031
2021-08-116.56.2cPanel R6400v2/R6700v3/R7900/R8000 denial of serviceHosting Control SoftwareNot DefinedOfficial Fix0.001030.00CVE-2021-38515
2020-09-256.46.1cPanel Protect SMTP Greylist privilege escalationHosting Control SoftwareNot DefinedOfficial Fix0.000840.00CVE-2020-26099
2019-08-076.86.5cPanel before race conditionHosting Control SoftwareNot DefinedOfficial Fix0.000650.02CVE-2016-10798
2011-06-073.53.1cPanel WHM cross site scriptingHosting Control SoftwareProof-of-ConceptOfficial Fix0.000000.00
2007-02-087.37.0cPanel WebHost Manager privilege escalationHosting Control SoftwareHighOfficial Fix0.044790.00CVE-2007-0854
2007-02-084.34.1cPanel WebHost Manager cross site scriptingHosting Control SoftwareProof-of-ConceptNot Defined0.007180.00CVE-2007-0890
2007-02-077.36.9cPanel WebHost Manager objcache privilege escalationHosting Control SoftwareProof-of-ConceptNot Defined0.044790.00CVE-2007-0854
2006-12-143.53.4cPanel WebHost Manager cross site scriptingHosting Control SoftwareHighUnavailable0.001110.00CVE-2006-6548
2006-11-305.55.5cPanel WebHost Manager cross site scriptingHosting Control SoftwareNot DefinedNot Defined0.006400.00CVE-2006-6198

◂ PoprzedniPrzeglądKolejny ▸

Do you know our Splunk app?

Download it now for free!