Cisco Openresolve vulnerabilities

2 CVEs affecting Cisco Openresolve, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-10011, published 2023-01-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-10011, published 2023-01-02. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output…
CVE-2015-10010, published 2023-01-02. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the function get of the file resolverapi/endpoints.py of the component API. The…