Puppetlabs Mcollective — known CVE vulnerabilities

Every CVE whose affected-product data names Puppetlabs Mcollective, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2014-3251 — CVSS 4.4 (medium): The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective before 2.5.3, does not properly validate new…