Approved changes feed: RSS · Atom
cpe:2.3:a:nasa:openmct:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nasa (53a37713-6109-50d8-8bfa-fbb4eca64abd) |
|---|---|
| Product | Openmct (5048f817-0d12-5d70-93ac-bb1adb995491) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-45885 |
vulnerable | 2026-06-08 06:12:43.552283 |
Details available
Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin.
Published: 2023-11-09T00:00:00.000Z
Updated: 2024-09-04T13:56:29.766Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45884 |
vulnerable | 2026-06-08 06:12:43.551714 |
Details available
Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin.
Published: 2023-11-09T00:00:00.000Z
Updated: 2024-09-04T14:56:35.245Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45282 |
vulnerable | 2026-06-08 06:12:42.442445 |
Details available
In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.
Published: 2023-10-06T00:00:00.000Z
Updated: 2024-09-19T18:51:56.552Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23054 |
vulnerable | 2026-06-08 05:40:56.088610 |
Openmct XSS via the “Summary Widget”
MEDIUM (6.1)
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.
Published: 2022-02-20T19:00:17.000Z
Updated: 2024-08-03T03:28:43.268Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23053 |
vulnerable | 2026-06-08 05:40:56.088080 |
Openmct XSS via the “Condition Widget”
MEDIUM (6.1)
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.
Published: 2022-02-20T19:00:15.000Z
Updated: 2024-08-03T03:28:43.252Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22126 |
vulnerable | 2026-06-08 05:40:06.035737 |
Openmct XSS via the “Web Page” element
MEDIUM (6.1)
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.
Published: 2022-02-20T19:00:14.000Z
Updated: 2024-08-03T03:07:48.263Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.