Vulnerabilities > Cpanel > Cpanel > 11.51.9999.165

DATE CVE VULNERABILITY TITLE RISK
2019-07-30 CVE-2019-14389 Unspecified vulnerability in Cpanel
cPanel before 82.0.2 allows local users to discover the MySQL root password (SEC-510).
local
low complexity
cpanel
2.1
2019-07-30 CVE-2019-14388 Unspecified vulnerability in Cpanel
cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled (SEC-507).
network
low complexity
cpanel
5.0
2019-07-30 CVE-2019-14387 Cross-site Scripting vulnerability in Cpanel
cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates (SEC-506).
network
cpanel CWE-79
4.3
2019-07-30 CVE-2019-14386 Cross-site Scripting vulnerability in Cpanel
cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface (SEC-504).
network
cpanel CWE-79
3.5
2018-08-30 CVE-2018-16236 Cross-site Scripting vulnerability in Cpanel
cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering.
network
cpanel CWE-79
4.3