Skip to content

Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

SaltStack: actively exploited vulnerabilities

3 vulnerabilities in SaltStack products (Salt) are in CISA’s catalog of exploited vulnerabilities. Last added: November 3, 2021.

0 vulnerabilities added in the last 12 months
3 exploited vulnerabilities in the catalog, in total
0 added in the last 30 days

By category

Add just one SaltStack category to your radar, or open its page.

Monitoring, ITSM and asset management 3 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Salt 3 vulnerabilities · Monitoring and ITSM

Name used by CISA: SaltStack. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this SaltStack list.

Rank 1SaltStack Salt
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
Added more than a year ago: ranked by severity.
Added
Nov 3, 2021
CISA deadline
181 days
CVSS severity
9.8 (critical)
Rank 2SaltStack Salt
CVE-2020-16846
SaltStack Salt Shell Injection Vulnerability
Added more than a year ago: ranked by severity.
Added
Nov 3, 2021
CISA deadline
181 days
CVSS severity
9.8 (critical)
Rank 3SaltStack Salt
CVE-2020-11652
SaltStack Salt Path Traversal Vulnerability
Added more than a year ago: ranked by severity.
Added
Nov 3, 2021
CISA deadline
181 days
CVSS severity
6.5 (medium)

Indicative classification, based on the vendor and product names given by CISA. How products are classified.