Skip to content

Vendor

newrelic vulnerabilities

3 published CVES affecting newrelic, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of newrelic alerts

Products

Latest newrelic CVEs

Newest publication first

  1. CVE-2019-3800 CF CLI writes the client id and secret to config file

    Published
    HighCVSS 7.8 EPSS 2.1%

    CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is t...

  2. CVE-2017-9246 New Relic .NET Agent contains SQL Injection

    Published
    CriticalCVSS 9.8 EPSS 1.2%

    New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after bypassing a SET SHOWPL...

  3. CVE-2013-0284 newrelic_rpm Gem Discloses Sensitive Information

    Published
    MediumCVSS 5.0 EPSS 1.3% PoC

    Ruby agent 3.2.0 through 3.5.2 serializes sensitive data when communicating with servers operated by New Relic, which allows remote attackers to obtain sensitive information (database credentials and SQL statements) by sniffing the network and deserializing the data.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.