Known vulnerabilities in pfSense Plus

Vendor: Rubicon Communications
Software: pfSense Plus
Software CPE: cpe:2.3:a:rubicon_communications:pfsense_plus:*:*:*:*:*:*:*:*
Website: https://www.netgate.com/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting pfSense Plus pfSense Plus is affected by 3 known vulnerabilities: 1 medium, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61367 - Improper input validation
CVE-2022-24299		 CWE-20 Medium
No
No
 22.01 15.03.2022 SB2022031507
#VU61366 - Improper Access Control
CVE-2022-26019		 CWE-284 Low
No
No
 22.01 15.03.2022 SB2022031507
#VU61365 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20729		 CWE-79 Low
No
No
 21.05.1 15.03.2022 SB2022031506