Apache Openwhisk vulnerabilities

2 CVEs affecting Apache Openwhisk, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-11757, published 2018-07-23.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-11756, published 2018-07-23. Critical severity, CVSS 9.8. EPSS: 8.1% chance of exploitation in the next 30 days. In PHP Runtime for Apache OpenWhisk, a Docker action inheriting one of the Docker tags openwhisk/action-php-v7.2:1.0.0 or openwhisk/action-php-v7.1:1.0.1 (or earlier) may allow an attacker to replace…
• CVE-2018-11757, published 2018-07-23. Critical severity, CVSS 9.8. EPSS: 7.5% chance of exploitation in the next 30 days. In Docker Skeleton Runtime for Apache OpenWhisk, a Docker action inheriting the Docker tag openwhisk/dockerskeleton:1.3.0 (or earlier) may allow an attacker to replace the user function inside the…