Brand
SaltStack: actively exploited vulnerabilities
3 vulnerabilities in SaltStack products (Salt) are in CISA’s catalog of exploited vulnerabilities. Last added: November 3, 2021.
-
0 vulnerabilities added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one SaltStack category to your radar, or open its page.
- Monitoring, ITSM and asset management 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Salt3 vulnerabilities, Monitoring and ITSM
Name used by CISA: SaltStack. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this SaltStack list.
- Rank 1
SaltStack SaltCVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
- Rank 2
SaltStack SaltCVE-2020-16846
SaltStack Salt Shell Injection Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
- Rank 3
SaltStack SaltCVE-2020-11652
SaltStack Salt Path Traversal Vulnerability
CVSS severity 6.5medium
Added Nov 3, 2021
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.