Vulnerabilities > Portainer > Portainer > 2.5.1

DATE CVE VULNERABILITY TITLE RISK
2022-02-11 CVE-2022-24961 Unspecified vulnerability in Portainer
In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days.
network
low complexity
portainer
7.5
2021-10-18 CVE-2021-42650 Cross-site Scripting vulnerability in Portainer
Cross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates.
network
portainer CWE-79
4.3