mutiny vulnerabilities

Products

• mutiny 3
• mutiny appliance 1
• mutiny virtual appliance 1
• standard 1

Latest mutiny CVEs

Newest publication first

1. CVE-2022-37832 Mutiny 7.2.0-10788 suffers from Hardcoded root password.

   Published 2022-12-16

   Critical·CVSS 9.8

   Mutiny 7.2.0-10788 suffers from Hardcoded root password.

2. CVE-2018-15529 A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenticated users, with access to the admin interface, to inject arbitrary commands wit...

   Published 2018-08-28

   High·CVSS 8.8

   A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenticated users, with access to the admin interface, to inject arbitrary commands within the filename of a system upgrade upload.

3. CVE-2013-0136 Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbit...

   Published 2013-06-01

   High·CVSS 8.5 EPSS 40.3% Framework module Public exploit

   Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service (file deletion or renaming) via (1) the...

4. CVE-2012-3001 Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."

   Published 2012-10-22

   High·CVSS 8.5 EPSS 27.3% Framework module Public exploit

   Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.