Vulnerabilities > NSA > Emissary

DATE CVE VULNERABILITY TITLE RISK
2021-07-02 CVE-2021-32639 Server-Side Request Forgery (SSRF) vulnerability in NSA Emissary
Emissary is a P2P-based, data-driven workflow engine.
network
low complexity
nsa CWE-918
critical
9.9
2021-06-01 CVE-2021-32647 Unsafe Reflection vulnerability in NSA Emissary 6.4.0
Emissary is a P2P based data-driven workflow engine.
network
low complexity
nsa CWE-470
critical
9.1
2021-05-21 CVE-2021-32634 Deserialization of Untrusted Data vulnerability in NSA Emissary 6.4.0
Emissary is a distributed, peer-to-peer, data-driven workflow framework.
network
low complexity
nsa CWE-502
7.2
2021-05-07 CVE-2021-32092 Cross-site Scripting vulnerability in NSA Emissary 5.9.0
A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S.
network
low complexity
nsa CWE-79
6.1
2021-05-07 CVE-2021-32093 Missing Authorization vulnerability in NSA Emissary 5.9.0
The ConfigFileAction component of U.S.
network
low complexity
nsa CWE-862
6.5
2021-05-07 CVE-2021-32094 Unrestricted Upload of File with Dangerous Type vulnerability in NSA Emissary 5.9.0
U.S.
network
low complexity
nsa CWE-434
8.8
2021-05-07 CVE-2021-32095 Missing Authorization vulnerability in NSA Emissary 5.9.0
U.S.
network
low complexity
nsa CWE-862
8.1
2021-05-07 CVE-2021-32096 Cross-Site Request Forgery (CSRF) vulnerability in NSA Emissary 5.9.0
The ConsoleAction component of U.S.
network
low complexity
nsa CWE-352
8.8