Orca

This hub aggregates every CVE we track for Orca, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 4 most recently published vulnerabilities affecting Orca.

• CVE-2020-9298The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitiv...7.5Aug 28, 2020
• CVE-2013-4245Orca has arbitrary code execution due to insecure Python module load7.3Dec 11, 2019
• CVE-2009-2919Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field.3.5Aug 21, 2009
• CVE-2008-5167PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL ...9.3Nov 19, 2008