Canonical Landscape — known CVE vulnerabilities

Every CVE whose affected-product data names Canonical Landscape, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-32550 — CVSS 9.3 (critical): Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to…
• CVE-2023-32549 — CVSS 6.8 (medium): Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.
• CVE-2023-32551 — CVSS 6.1 (medium): Landscape allowed URLs which caused open redirection.