VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

402,143 vulnerabilities · 1,766 actively exploited (CISA KEV)

portainer ✕Clear filters

26 results

ID	Severity	Summary	Published
CVE-2019-16874	MEDIUM6.5	Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).	07/11/2019
CVE-2019-16873	MEDIUM5.4	Portainer before 1.22.1 has XSS (issue 1 of 2).	07/11/2019
CVE-2018-19466	CRITICAL9.8	A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls.	27/03/2019
CVE-2018-19367	CRITICAL9.8	Portainer through 1.19.2 provides an API endpoint (/api/users/admin/check) to verify that the admin user is already created. This API endpoint will return 404 if admin was not created and 204 if it was already created. Attackers can set an admin password in the 404 case.