Vulnerabilities > Northern Tech > Cfengine > 3.15.3

DATE CVE VULNERABILITY TITLE RISK
2023-11-14 CVE-2023-45684 SQL Injection vulnerability in Northern.Tech Cfengine
Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection.
network
low complexity
northern-tech CWE-89
7.5
7.5
2023-04-26 CVE-2023-26560 Unspecified vulnerability in Northern.Tech Cfengine
Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports feature to read arbitrary files and potentially discover credentials.
network
low complexity
northern-tech
6.5
6.5