nautobot Summary

Latest vulnerabilities published by nautobot

JSON RSS CSV 🔔 Create Alert Trigger

10 June 2025

User Authentication Lapse in Nautobot Network Automation Platform
CVE-2025-49143
NautobotNautobot6.3MEDIUM
Insufficient Security Configuration in Nautobot Network Automation Platform
CVE-2025-49142
NautobotNautobot6MEDIUM

28 May 2024

Nautobot Failure to Restrict Dynamic Group Member Listings Based on Object Permissions
CVE-2024-36112
NautobotNautobot6.3MEDIUM

14 May 2024

Cross-Site Scripting Vulnerability in Nautobot Network Automation Platform
CVE-2024-34707
NautobotNautobot

1 May 2024

Nautobot vulnerable to Reflected Cross-Site Scripting (Reflected XSS) attack
CVE-2024-32979
NautobotNautobot7.5HIGH

26 March 2024

Unauthorized Access to Nautobot Endpoints Due to Default Configuration
CVE-2024-29199
NautobotNautobot3.7LOW

23 January 2024

Nautobot has XSS potential in rendered Markdown fields
CVE-2024-23345
NautobotNautobot7.1HIGH

22 December 2023

Nautobot missing object-level permissions enforcement when running Job Buttons
CVE-2023-51649
nautobotnautobot3.5LOW

12 December 2023

Nautobot allows unauthenticated db-file-storage views
CVE-2023-50263
nautobotnautobot3.7LOW

22 November 2023

nautobot has XSS potential in custom links, job buttons, and computed fields
CVE-2023-48705
nautobotnautobot5.4MEDIUM

21 November 2023

Clear Text Credentials Exposed via Onboarding Task
CVE-2023-48700
nautobotnautobot-plugin-device...6.5MEDIUM

25 October 2023

Exposure of hashed user passwords via REST API in Nautobot
CVE-2023-46128
NautobotNautobot6.5MEDIUM

21 February 2023

Remote code execution in Jinja2 template rendering in Nautobot
CVE-2023-25657
NautobotNautobot7.5HIGH

No more vulnerabilities to load.