VendorsNASAopenmctany version
Vulnerabilities

NASA Open MCT any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2023-45282
In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.
Published 2023-10-06 · Modified
7.5EPSS 0.009
CVE-2023-45884
Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin.
Published 2023-11-09 · Modified
6.5EPSS 0.003
CVE-2022-22126
Openmct XSS via the “Web Page” element
Published 2022-02-20 · Modified
6.1EPSS 0.006
CVE-2022-23053
Openmct XSS via the “Condition Widget”
Published 2022-02-20 · Modified
6.1EPSS 0.006
CVE-2022-23054
Openmct XSS via the “Summary Widget”
Published 2022-02-20 · Modified
6.1EPSS 0.006
CVE-2023-45885
Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin.
Published 2023-11-09 · Modified
5.4EPSS 0.005