The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an <iFrame> HTML entry. This may be used by a malicious website in clickjacking or similar attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cockpitUpgrade cockpit-wsUpgrade cockpit-bridgeUpgrade cockpit-docUpgrade cockpit-system | May 13, 2022 | Mar 10, 2022 |
| Centos_linux | — | Upgrade cockpit-debuginfoUpgrade cockpit-systemUpgrade cockpitUpgrade cockpit-docUpgrade cockpit-bridgeUpgrade cockpit-wsUpgrade cockpit-debugsource | May 13, 2022 | Mar 10, 2022 |
| Debian | — | Upgrade cockpit | Jul 30, 2024 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cockpit-wsUpgrade cockpitUpgrade cockpit-bridgeUpgrade cockpit-packagekitUpgrade cockpit-storagedUpgrade cockpit-docUpgrade cockpit-system | Dec 28, 2021 | Dec 25, 2021 |
| Oracle_linux | — | Upgrade cockpit-bridgeUpgrade cockpit-systemUpgrade cockpit-docUpgrade cockpit-wsUpgrade cockpit | May 18, 2022 | Jul 20, 2021 |
| Redhat_linux | — | Upgrade cockpit-debuginfoUpgrade cockpitUpgrade cockpit-docNo solution existsUpgrade cockpit-bridgeUpgrade cockpit-systemUpgrade cockpit-debugsourceUpgrade cockpit-ws | May 13, 2022 | Mar 10, 2022 |
| Rocky_linux | — | Upgrade cockpit-debuginfoUpgrade cockpit-debugsourceUpgrade cockpitUpgrade cockpit-bridgeUpgrade cockpit-ws | Mar 5, 2024 | Mar 10, 2022 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 10, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub