misp project
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 24 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 21, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →MISP remote code execution via arbitrary rdkafka configuration path
Authenticated Remote Code Execution via Arbitrary NDJSON Error Log Path in MISP
MISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection
MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints
MISP Core: Mass Assignment and Object Re-ownership via Unvalidated Request Fields
MISP event editing allows unauthorized assignment to undisclosed sharing groups
MISP AuthKey edit endpoint allows authenticated user email enumeration
MISP template builder exposes non-visible custom galaxies across organisations
MISP mass assignment vulnerabilities allow unauthorized modification of ownership and delegation records
MISP automation endpoints may be exposed to CSRF when Sec-Fetch-Site protection is disabled by default
Monitor misp project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.