Tautulli
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 17 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 19, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Tautulli: Stored Cross-Site Scripting (XSS) in the newsletter
Tautulli vulnerable to unauthenticated SSRF in /image/<hash> via attacker-seeded image hash replay
Taultulli has CSRF in /configUpdate via missing anti-CSRF and method restriction that allows admin credential takeover
Tautulli has stored XSS in logFile via guest-controlled log_js_errors input
Tautulli Vulnerable to Unauthenticated/Authenticated Remote Code Execution via Newsletter Custom Template Directory
Tautulli Vulnerable to Authenticated Path Traversal in Cache Deletion API
Tautulli: Unsanitized JSONP callback parameter allows cross-origin script injection and API key theft
Tautulli: SQL Injection in get_home_stats API endpoint via unsanitised filter parameters
Tautulli: Unauthenticated Path Traversal in `/newsletter/image/images` endpoint
Tautulli: Unauthenticated pms_image_proxy endpoint proxies arbitrary HTTP requests through the Plex Media Server
Monitor Tautulli in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.