S
Vendor security profile3 actively exploited CVEs
SaltStack
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical2
CISA KEV3
Public exploit3
Patch rate%0
Avg. CVSS8.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
3toplam CVE
Critical2 (67%)
Medium1 (33%)
Patch and exploitation view
%0
Verified patch
%100
CISA KEV
%100
Public exploit
0Patch available
0Partial
0Workaround
3Vendor: no patch
0Unknown
Latest vulnerabilities
9.8
CVE-2020-16846 Actively exploited
salt: sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection
RH
No patch (vendor)EPSS %100
6.5
CVE-2020-11652 Actively exploited
salt: salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths
RH
No patch (vendor)EPSS %86
9.8
CVE-2020-11651 Actively exploited
salt: salt-master process ClearFuncs class does not properly validate method calls
RH
No patch (vendor)EPSS %97