Mitre Caldera vulnerabilities

• mitre caldera In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE)... CVE-2025-27364 EPSS 25.9% 10.0 CriticalFebruary 24, 2025
• mitre caldera Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of... CVE-2023-51792 Fix available 3.3 LowApril 19, 2024
• mitre caldera MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary commands on agents. CVE-2022-41139 5.4 MediumOctober 17, 2022
• mitre caldera MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605. CVE-2022-40606 6.1 MediumOctober 17, 2022
• mitre caldera MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606. CVE-2022-40605 6.1 MediumOctober 17, 2022
• mitre caldera An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that... CVE-2021-42559 Public exploit 8.8 HighJanuary 12, 2022
• mitre caldera An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS... CVE-2021-42558 Public exploit 6.1 MediumJanuary 12, 2022
• mitre caldera An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded "SVG"... CVE-2021-42560 Public exploit 8.8 HighJanuary 12, 2022
• mitre caldera An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized... CVE-2021-42561 Public exploit EPSS 19.6% 8.8 HighJanuary 12, 2022
• mitre caldera An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges,... CVE-2021-42562 Public exploit 8.1 HighJanuary 12, 2022
• mitre caldera A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows... CVE-2020-19907 8.8 HighJuly 12, 2021
• mitre caldera CALDERA 2.7.0 allows XSS via the Operation Name box. CVE-2020-14462 5.4 MediumJune 19, 2020
• mitre caldera auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a... CVE-2020-10807 5.3 MediumMarch 22, 2020