Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2025-6724

Chef Automate SQL Injection Vulnerability

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Chef Linux
Products
Automate Chef Linux and 1 more
CVE-2025-8868

Chef Automate compliance service SQL Injection Vulnerability

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token.

CVSS 3.1 · 9.8 Critical EPSS 27.8% KEV · Not listed
Vendors
Chef Linux
Products
Automate Chef Linux and 1 more
CVE-2023-40050

Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application

Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with maliciously crafted profile allows remote code execution.

CVSS 3.1 · 9.9 Critical EPSS 1.5% KEV · Not listed
Vendors
Chef
Products
Automate