Known vulnerabilities in Plesk 17.5.3 Update 36

Vendor: Parallels
Software: Plesk
Version: 17.5.3 Update 36
Software CPE: cpe:2.3:a:parallels:plesk:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Plesk version 17.5.3 Update 36 Plesk 17.5.3 Update 36 is affected by 7 vulnerabilities: 1 high, 3 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47122 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
17.5.3 Update 96, 17.8.11 Update 91 28.09.2020 SB2020062003
SB2020092802
#VU31929 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Medium
No
No
17.5.3 Update 95 27.07.2020 SB2020072743
#VU31928 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
17.5.3 Update 95 27.07.2020 SB2020072743
#VU28219 - Use of Hard-coded Credentials
CVE-2020-13166
CWE-798 High
Public exploit available
No
17.5.3 Update 95, 17.8.11 Update 89 25.05.2020 SB2020052515
SB2020072805
#VU9869 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5712
CWE-79 Low
No
No
- 04.01.2018 SB2018010412
SB2018011109
#VU9868 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-5711
CWE-835 Low
No
No
- 04.01.2018 SB2018010412
SB2018011109
#VU9867 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2015-8866
CWE-611 Medium
No
No
- 22.05.2016 SB2018010412
SB2018011109