Observium

Products

ProductCVEsExploitedLatest
Observium3–Jan 15, 2025

Exploited and recent CVEs

  • CVE-2024-47140 High 8.7 A cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution. An authent 0.7%
  • CVE-2024-47002 High 8.7 A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528. A specially crafted HTTP request can lead to an arbitrary html code. An authenticated user would need 15.6%
  • CVE-2024-45061 High 8.7 A cross-site scripting (xss) vulnerability exists in the weather map editor functionality of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution 1.1%