cfme-amazon-smartstate

Direct Vulnerabilities

Known vulnerabilities in the cfme-amazon-smartstate package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Cross-site Scripting (XSS)	<0:5.9.0.22-1.el7cf
M Improper Input Validation	<0:5.9.5.3-1.el7cf
H Improper Access Control	<0:5.9.4.7-1.el7cf
H Improper Input Validation	<0:5.9.2.4-1.el7cf
H Incorrect Privilege Assignment	<0:5.9.2.4-1.el7cf
H Directory Traversal	<0:5.9.4.7-1.el7cf
M Deserialization of Untrusted Data	<0:5.9.9.1-1.el7cf
M Cross-site Scripting (XSS)	<0:5.9.0.22-1.el7cf
M Information Exposure Through Log Files	<0:5.9.3.4-1.el7cf
M Cross-site Scripting (XSS)	<0:5.10.0.33-1.el7cf
M Cross-site Scripting (XSS)	<0:5.10.0.33-1.el7cf
M Cross-site Scripting (XSS)	<0:5.10.0.33-1.el7cf
M Cross-site Scripting (XSS)	<0:5.10.0.33-1.el7cf
M XML External Entity (XXE) Injection	<0:5.10.0.33-1.el7cf
M XML External Entity (XXE) Injection	<0:5.10.0.33-1.el7cf
L Cross-site Scripting (XSS)	*
L Cross-site Scripting (XSS)	*
H OS Command Injection	<0:5.10.15.1-1.el7cf
H OS Command Injection	<0:5.10.15.1-1.el7cf
L OS Command Injection	*
L Directory Traversal	*
M Cross-site Scripting (XSS)	<0:5.10.9.1-1.el7cf
M Cross-site Scripting (XSS)	<0:5.10.9.1-1.el7cf
M Improper Authorization	<0:5.10.8.0-1.el7cf
M Improper Authorization	<0:5.10.8.0-1.el7cf
M Cross-site Scripting (XSS)	*
H Improper Input Validation	<0:5.10.3.3-1.el7cf
H Improper Input Validation	<0:5.9.9.3-1.el7cf
H Improper Input Validation	<0:5.10.3.3-1.el7cf
H Information Exposure	<0:5.10.3.3-1.el7cf
H Information Exposure	<0:5.10.3.3-1.el7cf
H Information Exposure	<0:5.9.9.3-1.el7cf
H Information Exposure	<0:5.10.3.3-1.el7cf
H Information Exposure	<0:5.10.3.3-1.el7cf
M Resource Exhaustion	<0:5.10.13.1-1.el7cf
M Resource Exhaustion	<0:5.10.13.1-1.el7cf
L Man-in-the-Middle (MitM)	<0:5.10.1.2-1.el7cf
L Man-in-the-Middle (MitM)	<0:5.10.1.2-1.el7cf
L Reliance on Untrusted Inputs in a Security Decision	*
M Cross-site Scripting (XSS)	<0:5.10.0.33-1.el7cf
M Cross-site Scripting (XSS)	<0:5.10.0.33-1.el7cf
M Cross-site Scripting (XSS)	<0:5.9.8.1-1.el7cf
H Incorrect Authorization	<0:5.9.6.5-2.el7cf
H Insecure Temporary File	<0:5.9.6.5-2.el7cf
H Improper Authentication	<0:5.9.2.4-1.el7cf
H SQL Injection	<0:5.9.6.5-2.el7cf
M Cross-site Scripting (XSS)	<0:5.10.9.1-1.el7cf
M Cross-site Scripting (XSS)	<0:5.10.9.1-1.el7cf
H Improper Input Validation	<0:5.9.6.5-2.el7cf
H Improper Input Validation	<0:5.10.5.1-1.el7cf
H Improper Input Validation	<0:5.10.5.1-1.el7cf
H Arbitrary Argument Injection	<0:5.10.5.1-1.el7cf
H Arbitrary Argument Injection	<0:5.10.5.1-1.el7cf
H Arbitrary Argument Injection	<0:5.10.5.1-1.el7cf
H Arbitrary Argument Injection	<0:5.10.5.1-1.el7cf
H Arbitrary Argument Injection	<0:5.10.5.1-1.el7cf
H Arbitrary Argument Injection	<0:5.10.5.1-1.el7cf
H Arbitrary Argument Injection	<0:5.10.5.1-1.el7cf
H Arbitrary Argument Injection	<0:5.10.5.1-1.el7cf
H Directory Traversal	<0:5.10.5.1-1.el7cf
H Directory Traversal	<0:5.10.5.1-1.el7cf
L Insecure Temporary File	<0:5.10.7.1-1.el7cf
L Insecure Temporary File	<0:5.10.7.1-1.el7cf

Vulnerability

Vulnerable Version

Cross-site Scripting (XSS)

<0:5.9.0.22-1.el7cf