misp project
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 26 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 21, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →MISP Sharing Group Authorization Bypass via Omitted Distribution Parameter
Reflected Cross-Site Scripting in MISP Event Filtering via taggedAttributes and galaxyAttachedAttributes Parameters
MISP remote code execution via arbitrary rdkafka configuration path
Authenticated Remote Code Execution via Arbitrary NDJSON Error Log Path in MISP
MISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection
MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints
MISP Core: Mass Assignment and Object Re-ownership via Unvalidated Request Fields
MISP event editing allows unauthorized assignment to undisclosed sharing groups
MISP AuthKey edit endpoint allows authenticated user email enumeration
MISP template builder exposes non-visible custom galaxies across organisations
Monitor misp project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.