Vulnerabilities > Darktrace
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-16 | CVE-2024-22854 | Open Redirect vulnerability in Darktrace Threat Visualizer 6.0.0/6.0.15/6.1.27 DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 (bundle version 61050) and before has been identified. | 6.1 |
| 2023-07-06 | CVE-2023-29656 | Incorrect Authorization vulnerability in Darktrace Threat Visualizer 6.0.0 An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actions(block/unblock traffic) from the mobile application. | 6.1 |
| 2019-10-23 | CVE-2019-9597 | Cross-Site Request Forgery (CSRF) vulnerability in Darktrace Enterprise Immune System 3.0.10/3.0.9 Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint. | 6.5 |
| 2019-10-23 | CVE-2019-9596 | Cross-Site Request Forgery (CSRF) vulnerability in Darktrace Enterprise Immune System 3.0.10/3.0.9 Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint. | 6.5 |