Newrelic vulnerabilities
3 vulnerabilities
Known vulnerabilities in Newrelic products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
Products
5- Dotnet Extension Buildpack1 vulnerabilities
- .Net Agent1 vulnerabilities
- Nozzle1 vulnerabilities
- Ruby Agent1 vulnerabilities
- Service Broker1 vulnerabilities
CVE-2013-0284RubyGemsnewrelic_rpm+1
EPSS score1.25%
Ruby agent 3.2.0 through 3.5.2 serializes sensitive data when communicating with servers operated by New Relic, which allows remote attackers to obtain sensitive information (database credentials and SQL statements) by sniffing the network and deserializing the data.CVE-2017-9246newrelic.net_agent+1EPSS score1.19%
New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after bypassing a SET SHOWPLAN_ALL ON protection mechanism.CVE-2019-3800anynineselasticsearch+56EPSS score2.09%
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.