← Back

Freenas

freenas

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Freenas
freenas

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Freenas
1Freenas
Nov 21, 2024
Jan 8, 2018
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root privileges by leveraging a WebGui login.
1Freenas
1Freenas
Apr 23, 2026
Aug 11, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
1Freenas
1Freenas
Apr 23, 2026
Aug 11, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors.