S
Vendor security profile3 actively exploited CVEs
SaltStack
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical1
CISA KEV3
Public exploit3
Patch rate%0
Avg. CVSS9.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
3toplam CVE
Critical1 (33%)
Uncertain2 (67%)
Patch and exploitation view
%0
Verified patch
%100
CISA KEV
%100
Public exploit
0Patch available
0Partial
2Workaround
1Vendor: no patch
0Unknown
Latest vulnerabilities
-
CVE-2020-16846 Actively exploited
SaltStack Salt Shell Injection Vulnerability
S
WorkaroundEPSS %100
-
CVE-2020-11652 Actively exploited
SaltStack Salt Path Traversal Vulnerability
S
WorkaroundEPSS %86
9.8
CVE-2020-11651 Actively exploited
salt: salt-master process ClearFuncs class does not properly validate method calls
RH
No patch (vendor)EPSS %97