SaltStack known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 3 SaltStack vulnerabilities: 0 added in the last 365 days, 2 rated critical (CVSS 9 or higher), and 0 with known ransomware use. The most recent was added Nov 3, 2021.
RSS feed for SaltStack exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2021-11-03 | CVE-2020-11651 | SaltStack Salt Authentication Bypass Vulnerability | 9.8 (v3.1) | 96.6% | 2022-05-03 | Unknown |
| 2021-11-03 | CVE-2020-11652 | SaltStack Salt Path Traversal Vulnerability | 6.5 (v3.1) | 86.2% | 2022-05-03 | Unknown |
| 2021-11-03 | CVE-2020-16846 | SaltStack Salt Shell Injection Vulnerability | 9.8 (v3.1) | 99.6% | 2022-05-03 | Unknown |