Nasa Openmct vulnerabilities

6 vulnerabilities

Known vulnerabilities in Nasa Openmct, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2022-22126nasaopenmct
EPSS score
0.61%
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.6.1CVE-2022-23054nasaopenmct
EPSS score
0.61%
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.6.1CVE-2022-23053nasaopenmct
EPSS score
0.61%
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.7.5CVE-2023-45282nasaopenmct+1
EPSS score
1.16%
In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.5.4CVE-2023-45885nasaopenmct+1
EPSS score
0.46%
Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin.6.5CVE-2023-45884nasaopenmct+1
EPSS score
0.33%
Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin.