Approved changes feed: RSS · Atom
cpe:2.3:a:mitre:caldera:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mitre (c3499402-76d8-5382-a83a-c559cce713bc) |
|---|---|
| Product | Caldera (78484e4c-350b-5db8-89fe-dc776813ca9f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mitre/caldera |
purl2cpe | 2026-06-01 10:15:10.254941 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-27364 |
vulnerable | 2026-06-08 07:14:54.732467 |
Details available
CRITICAL (10)
In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE) vulnerability was found in the dynamic agent (implant) compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is running on via a crafted web request to the Caldera server API used for compiling and downloading of Caldera's Sandcat or Manx agent (implants). This web request can use the gcc -extldflags linker flag with sub-commands.
Published: 2025-02-24T00:00:00.000Z
Updated: 2025-02-24T19:22:10.867Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51792 |
vulnerable | 2026-06-08 06:17:54.012983 |
Details available
Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000.
Published: 2024-04-19T00:00:00.000Z
Updated: 2025-11-04T17:13:49.232Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41139 |
vulnerable | 2026-06-08 05:48:29.931154 |
Details available
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary commands on agents.
Published: 2022-10-17T00:00:00.000Z
Updated: 2025-05-14T20:28:18.406Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40606 |
vulnerable | 2026-06-08 05:48:27.703941 |
Details available
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605.
Published: 2022-10-17T00:00:00.000Z
Updated: 2025-05-14T20:26:59.469Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40605 |
vulnerable | 2026-06-08 05:48:27.703477 |
Details available
MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606.
Published: 2022-10-17T00:00:00.000Z
Updated: 2025-05-14T20:25:34.233Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42562 |
vulnerable | 2026-06-08 05:35:22.348175 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42561 |
vulnerable | 2026-06-08 05:35:22.347720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42559 |
vulnerable | 2026-06-08 05:35:22.345478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42558 |
vulnerable | 2026-06-08 05:35:22.344951 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-19907 |
vulnerable | 2026-06-08 05:20:57.477848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10807 |
vulnerable | 2026-06-08 05:16:35.915396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.