Netflix Lemur — known CVE vulnerabilities

Every CVE whose affected-product data names Netflix Lemur, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-7764 — CVSS 7.5 (high): Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode.
• CVE-2023-30797 — CVSS 7.5 (high): Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values…