CWE-180

Total CVEs
4
Vulnerabilities
Avg CVSS v3
6.8
Medium
Latest CVE
2025
Most Recent

Severity Distribution

Critical 1
25%
High 1
25%
Medium 1
25%
Low 1
25%

External References

All CVEs (4)

Page 1 of 1
CVSS:9.8(Critical)

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by e...

CVSS:8.8(High)

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses. Atlassi...

CVSS:5.8(Medium)

A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9. By appending %3F.php to the URI of the /client/index.php endpoint, an attacker can bypass access contro...

CVSS:2.9(Low)

The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via a falsy isPrivate return value.