SaltStack

CVEs currently on EVULNABLE's Priority Feed for SaltStack, and this vendor's own CISA KEV history.

In EVULNABLE's ranked feed

Showing all 3 SaltStack CVEs in EVULNABLE's ranked feed.

#1 87 Immediate CVE-2020-16846 ExigentKEV since 2021 · listed over a yearCISA KEV SaltStack — SaltStack Salt Shell Injection Vulnerability

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.6% · 99.95th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.

#2 86 Immediate CVE-2020-11651 ExigentKEV since 2021 · listed over a yearCISA KEV SaltStack — SaltStack Salt Authentication Bypass Vulnerability

EVRS 86/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS96.6% · 99.88th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.966.

#3 79 Urgent CVE-2020-11652 KEV since 2021 · listed over a yearCISA KEV SaltStack — SaltStack Salt Path Traversal Vulnerability

EVRS 79/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.5 (NVD)EPSS86.2% · 99.73rd pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.862.