Cobblerd Cobbler — known CVE vulnerabilities

Every CVE whose affected-product data names Cobblerd Cobbler, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2018-1000226 — CVSS 9.8 (critical): Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older…
• CVE-2011-4952 — CVSS 8.8 (high): cobbler: Web interface lacks CSRF protection when using Django framework
• CVE-2011-4954 — CVSS 7.8 (high): cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE
• CVE-2018-1000225 — CVSS 6.1 (medium): Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older…
• CVE-2014-3225 — CVSS 4.0 (medium): Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read…