edgexfoundry vulnerabilities
3 published CVEs name edgexfoundry among the affected products.
- 3Published CVEs3 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2022-31066
Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users
edgexfoundry · edgex-go
Medium5.9 - CVE-2021-41278
Broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors
edgexfoundry · app-functions-sdk-go
Medium5.4 - CVE-2021-32753
Weak password in API gateway in EdgeX Foundry Edinburgh, Fuji, Geneva, and Hanoi releases allows remote attackers to obtain authentication token via dictionary-based password attack when OAuth2 authentication method is enabled.
edgexfoundry · edgex-go
High8.3