Advisories · Technology
CISA Malcolm.
Every CVE that names CISA Malcolm among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Incorrect Authorization in Malcolm
- CISA Malcolm
- Broken access control
- CVSS 6.5 Medium
Improper Handling of Highly Compressed Data in Malcolm
- CISA Malcolm
- CWE-409
- CVSS 7.1 High
Cross-Site Request Forgery in Malcolm
- CISA Malcolm
- Cross-site request forgery (CSRF)
- CVSS 4.2 Medium
Authentication Bypass Using an Alternate Path or Channel in Malcolm
- CISA Malcolm
- Authentication bypass
- CVSS 7.1 High
Server-Side Request Forgery in Malcolm
- CISA Malcolm
- Server-side request forgery (SSRF)
- CVSS 8.1 High
Incorrect Authorization in Malcolm
- CISA Malcolm
- Broken access control
- CVSS 6.5 Medium
Authentication Bypass by Spoofing in Malcolm
- CISA Malcolm
- Authentication bypass
- Broken access control
- CVSS 6.9 Medium
Weak password hashing in CISA Malcolm
- CISA Malcolm
- Weak cryptography or TLS
- CVSS 9.2 CriticalCritical · CVSS 9+
Use of default credentials in Malcolm
- CISA Malcolm
- CWE-1392
- CVSS 6.3 Medium
Dependency on vulnerable third-party component in Malcolm
- CISA Malcolm
- CWE-1395
- CVSS 5.3 Medium
Missing authorization in Malcolm
- CISA Malcolm
- Broken access control
- CVSS 5.1 Medium
Open Redirect in Malcolm
- CISA Malcolm
- Open redirect
- CVSS 6.0 Medium
Improper certificate validation in Malcolm
- CISA Malcolm
- Weak cryptography or TLS
- CVSS 8.2 High
Use of Default Credentials in Malcolm
- CISA Malcolm
- CWE-1392
- CVSS 5.3 Medium
Incorrect Authorization in Malcolm
- CISA Malcolm
- Broken access control
- CVSS 6.9 Medium
Missing Authentication for Critical Function in Malcolm
- CISA Malcolm
- Authentication bypass
- CVSS 7.1 High
Missing Authorization in Malcolm
- CISA Malcolm
- Broken access control
- CVSS 7.1 High
Authentication Bypass by Spoofing in Malcolm
- CISA Malcolm
- Authentication bypass
- CVSS 5.3 Medium
Server-Side Request Forgery in Malcolm
- CISA Malcolm
- Server-side request forgery (SSRF)
- CVSS 7.1 High
Path Traversal in Malcolm
- CISA Malcolm
- Path traversal
- CVSS 8.7 High
OS Command Injection in Malcolm
- CISA Malcolm
- Command injection
- CVSS 5.3 Medium
Cross-site Scripting in Malcolm
- CISA Malcolm
- Cross-site scripting (XSS)