CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-36640

influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the CVE ID assignment is disputed because the vendor's documentation states "If InfluxDB is being deployed on a publicly accessible endpoint, we strongly recommend authentication be enabled. Otherwise the data will be publicly available to any unauthenticated user. The default settings do NOT enable authentication and authorization.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.017

EPSS Ranking 81.7%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2022-36640

Influxdata » Influxdb » Version: N/A

cpe:2.3:a:influxdata:influxdb:-
Influxdata » Influxdb » Version: 0.0.1

cpe:2.3:a:influxdata:influxdb:0.0.1
Influxdata » Influxdb » Version: 0.0.2

cpe:2.3:a:influxdata:influxdb:0.0.2
Influxdata » Influxdb » Version: 0.0.3

cpe:2.3:a:influxdata:influxdb:0.0.3
Influxdata » Influxdb » Version: 0.0.4

cpe:2.3:a:influxdata:influxdb:0.0.4
Influxdata » Influxdb » Version: 0.0.5

cpe:2.3:a:influxdata:influxdb:0.0.5
Influxdata » Influxdb » Version: 0.0.6

cpe:2.3:a:influxdata:influxdb:0.0.6
Influxdata » Influxdb » Version: 0.0.7

cpe:2.3:a:influxdata:influxdb:0.0.7
Influxdata » Influxdb » Version: 0.0.8

cpe:2.3:a:influxdata:influxdb:0.0.8
Influxdata » Influxdb » Version: 0.0.9

cpe:2.3:a:influxdata:influxdb:0.0.9
Influxdata » Influxdb » Version: 0.1.0

cpe:2.3:a:influxdata:influxdb:0.1.0
Influxdata » Influxdb » Version: 0.1.1

cpe:2.3:a:influxdata:influxdb:0.1.1
Influxdata » Influxdb » Version: 0.2.0

cpe:2.3:a:influxdata:influxdb:0.2.0
Influxdata » Influxdb » Version: 0.3.0

cpe:2.3:a:influxdata:influxdb:0.3.0
Influxdata » Influxdb » Version: 0.3.1

cpe:2.3:a:influxdata:influxdb:0.3.1
Influxdata » Influxdb » Version: 0.3.2

cpe:2.3:a:influxdata:influxdb:0.3.2
Influxdata » Influxdb » Version: 0.4.0

cpe:2.3:a:influxdata:influxdb:0.4.0
Influxdata » Influxdb » Version: 0.4.1

cpe:2.3:a:influxdata:influxdb:0.4.1
Influxdata » Influxdb » Version: 0.4.2

cpe:2.3:a:influxdata:influxdb:0.4.2
Influxdata » Influxdb » Version: 0.4.3

cpe:2.3:a:influxdata:influxdb:0.4.3
Influxdata » Influxdb » Version: 0.4.4

cpe:2.3:a:influxdata:influxdb:0.4.4
Influxdata » Influxdb » Version: 0.5.0

cpe:2.3:a:influxdata:influxdb:0.5.0
Influxdata » Influxdb » Version: 0.5.1

cpe:2.3:a:influxdata:influxdb:0.5.1
Influxdata » Influxdb » Version: 0.5.10

cpe:2.3:a:influxdata:influxdb:0.5.10
Influxdata » Influxdb » Version: 0.5.11

cpe:2.3:a:influxdata:influxdb:0.5.11
Influxdata » Influxdb » Version: 0.5.12

cpe:2.3:a:influxdata:influxdb:0.5.12
Influxdata » Influxdb » Version: 0.5.2

cpe:2.3:a:influxdata:influxdb:0.5.2
Influxdata » Influxdb » Version: 0.5.3

cpe:2.3:a:influxdata:influxdb:0.5.3
Influxdata » Influxdb » Version: 0.5.4

cpe:2.3:a:influxdata:influxdb:0.5.4
Influxdata » Influxdb » Version: 0.5.5

cpe:2.3:a:influxdata:influxdb:0.5.5
Influxdata » Influxdb » Version: 0.5.6

cpe:2.3:a:influxdata:influxdb:0.5.6
Influxdata » Influxdb » Version: 0.5.7

cpe:2.3:a:influxdata:influxdb:0.5.7
Influxdata » Influxdb » Version: 0.5.8

cpe:2.3:a:influxdata:influxdb:0.5.8
Influxdata » Influxdb » Version: 0.5.9

cpe:2.3:a:influxdata:influxdb:0.5.9
Influxdata » Influxdb » Version: 0.6.0

cpe:2.3:a:influxdata:influxdb:0.6.0
Influxdata » Influxdb » Version: 0.6.1

cpe:2.3:a:influxdata:influxdb:0.6.1
Influxdata » Influxdb » Version: 0.6.2

cpe:2.3:a:influxdata:influxdb:0.6.2
Influxdata » Influxdb » Version: 0.6.3

cpe:2.3:a:influxdata:influxdb:0.6.3
Influxdata » Influxdb » Version: 0.6.4

cpe:2.3:a:influxdata:influxdb:0.6.4
Influxdata » Influxdb » Version: 0.6.5

cpe:2.3:a:influxdata:influxdb:0.6.5
Influxdata » Influxdb » Version: 0.7.0

cpe:2.3:a:influxdata:influxdb:0.7.0
Influxdata » Influxdb » Version: 0.7.1

cpe:2.3:a:influxdata:influxdb:0.7.1
Influxdata » Influxdb » Version: 0.7.2

cpe:2.3:a:influxdata:influxdb:0.7.2
Influxdata » Influxdb » Version: 0.7.3

cpe:2.3:a:influxdata:influxdb:0.7.3
Influxdata » Influxdb » Version: 0.8.0

cpe:2.3:a:influxdata:influxdb:0.8.0
Influxdata » Influxdb » Version: 0.8.1

cpe:2.3:a:influxdata:influxdb:0.8.1
Influxdata » Influxdb » Version: 0.8.2

cpe:2.3:a:influxdata:influxdb:0.8.2
Influxdata » Influxdb » Version: 0.8.3

cpe:2.3:a:influxdata:influxdb:0.8.3
Influxdata » Influxdb » Version: 0.8.4

cpe:2.3:a:influxdata:influxdb:0.8.4
Influxdata » Influxdb » Version: 0.8.5

cpe:2.3:a:influxdata:influxdb:0.8.5
Influxdata » Influxdb » Version: 0.8.6

cpe:2.3:a:influxdata:influxdb:0.8.6
Influxdata » Influxdb » Version: 0.8.7

cpe:2.3:a:influxdata:influxdb:0.8.7
Influxdata » Influxdb » Version: 0.8.8

cpe:2.3:a:influxdata:influxdb:0.8.8
Influxdata » Influxdb » Version: 0.9.0

cpe:2.3:a:influxdata:influxdb:0.9.0
Influxdata » Influxdb » Version: 0.9.1

cpe:2.3:a:influxdata:influxdb:0.9.1
Influxdata » Influxdb » Version: 0.9.2

cpe:2.3:a:influxdata:influxdb:0.9.2
Influxdata » Influxdb » Version: 0.9.2.1

cpe:2.3:a:influxdata:influxdb:0.9.2.1
Influxdata » Influxdb » Version: 0.9.3

cpe:2.3:a:influxdata:influxdb:0.9.3
Influxdata » Influxdb » Version: 0.9.4

cpe:2.3:a:influxdata:influxdb:0.9.4
Influxdata » Influxdb » Version: 0.9.4.1

cpe:2.3:a:influxdata:influxdb:0.9.4.1
Influxdata » Influxdb » Version: 0.9.4.2

cpe:2.3:a:influxdata:influxdb:0.9.4.2
Influxdata » Influxdb » Version: 0.9.5

cpe:2.3:a:influxdata:influxdb:0.9.5
Influxdata » Influxdb » Version: 1.6.6

cpe:2.3:a:influxdata:influxdb:1.6.6
Influxdata » Influxdb » Version: 1.7.10

cpe:2.3:a:influxdata:influxdb:1.7.10
Influxdata » Influxdb » Version: 1.7.5

cpe:2.3:a:influxdata:influxdb:1.7.5
Influxdata » Influxdb » Version: 1.7.6

cpe:2.3:a:influxdata:influxdb:1.7.6
Influxdata » Influxdb » Version: 1.7.7

cpe:2.3:a:influxdata:influxdb:1.7.7
Influxdata » Influxdb » Version: 1.7.8

cpe:2.3:a:influxdata:influxdb:1.7.8
Influxdata » Influxdb » Version: 1.7.9

cpe:2.3:a:influxdata:influxdb:1.7.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-36640

Products

Pricing

Contact Us