Skip to contentCobbler Project Cobbler vulnerabilities
- cobblerCobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changesCVE-2024-47533Public exploitFix available9.8 Critical
- cobbler cobbler/cobbler, cobbler project cobbler, fedoraproject fedora +2 moreImproper Authorization in cobbler/cobblerCVE-2022-0860Fix available8.2 High
- cobbler project cobblerAn issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol...CVE-2021-450815.9 Medium
- cobbler project cobbler, fedoraproject fedora, opensuse backports +2 more +4 moreCommand Injection in CobblerCVE-2021-45082Fix available7.8 High
- cobbler project cobbler, fedoraproject fedora +1 moreIncorrect Default Permissions in CobblerCVE-2021-45083Fix available7.1 High
- cobbler project cobblerCobbler before 3.3.0 allows authorization bypass for modification of settings.CVE-2021-40325Fix available7.5 High
- cobbler project cobblerCobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.CVE-2021-40324Fix availableEPSS 68.6%7.5 High
- cobbler project cobblerCobbler before 3.3.0 allows log poisoningCVE-2021-40323Fix availableEPSS 86.8%9.8 Critical
- cobbler, redhat satellite +1 moreCobbler has Exposed Dangerous Method or FunctionCVE-2018-10931Fix availableEPSS 68.1%9.8 Critical
- cobbler project cobblerCobbler vulnerable to arbitrary code executionCVE-2017-1000469Fix available9.8 Critical
- cobblerCobbler Arbitrary File ReadCVE-2016-9605Fix available6.1 Medium
- cobbler project cobblerCobbler vulnerable to code injection via unsafe YAML loadingCVE-2011-4953Fix available6.8 Medium