misp-project
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 121 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 3, 2016 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →MISP remote code execution via arbitrary rdkafka configuration path
Authenticated Remote Code Execution via Arbitrary NDJSON Error Log Path in MISP
MISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection
Broken access control in MISP core allows cross-organization unauthorized modification or deletion of analyst data, event reports, collections, templates, and decaying models
MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints
MISP Dashboard widget field selection may expose restricted user and organisation data
MISP User-controlled order parameter in correlations over-correlation endpoint
MISP CRUDComponent delete validation bypass via operator precedence error
MISP post-login open redirect via pre_login_requested_url
Open redirect in MISP dashboard button widget URL handling
Monitor misp-project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.