Vulnerabilities (CVE)

Filtered by vendor Portainer Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-42650 1 Portainer 1 Portainer 2021-10-21 4.3 MEDIUM 6.1 MEDIUM
Cross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates.
CVE-2019-16874 1 Portainer 1 Portainer 2020-08-24 4.0 MEDIUM 6.5 MEDIUM
Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).
CVE-2019-16873 1 Portainer 1 Portainer 2019-11-07 3.5 LOW 5.4 MEDIUM
Portainer before 1.22.1 has XSS (issue 1 of 2).
CVE-2019-16878 1 Portainer 1 Portainer 2019-11-07 3.5 LOW 5.4 MEDIUM
Portainer before 1.22.1 has XSS (issue 2 of 2).
CVE-2018-16316 1 Portainer 1 Portainer 2018-11-09 3.5 LOW 5.4 MEDIUM
A stored Cross-site scripting (XSS) vulnerability in Portainer through 1.19.1 allows remote authenticated users to inject arbitrary JavaScript and/or HTML via the Team Name field.