Known vulnerabilities in Mattermost Server

Software CPE: cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 124
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mattermost Server Mattermost Server is affected by 124 known vulnerabilities: 17 high, 70 medium, 37 low Critical High Medium Low

Vulnerabilities (124)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55317 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
5.34.5, 5.35.4, 5.36.1, 5.37.0 27.07.2021 SB2021072701
#VU51610 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-362 Medium
No
No
5.33.1 22.03.2021 SB2021032220
#VU50774 - Improper input validation
CWE-20 Low
No
No
5.31.0 17.02.2021 SB2021021711
#VU50709 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
5.32.0 15.02.2021 SB2021021517
#VU49556 - Improper Authorization
CWE-285 Low
No
No
5.30.0 15.01.2021 SB2021011544
#VU29479 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-14447
CWE-835 Medium
No
No
5.23 02.07.2020 SB2020070214
#VU29478 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-14448
CWE-835 Medium
No
No
5.23 02.07.2020 SB2020070214
#VU29477 - Improper input validation
CVE-2020-14450
CWE-20 Medium
No
No
5.22.0 02.07.2020 SB2020070215
#VU29476 - Insufficient Verification of Data Authenticity
CVE-2020-14453
CWE-345 Medium
No
No
5.21 02.07.2020 SB2020070216
#VU29475 - Missing Authorization
CVE-2020-14457
CWE-862 Medium
No
No
5.20 02.07.2020 SB2020070217
#VU29474 - Exposure of sensitive information to an unauthorized actor
CVE-2020-14458
CWE-200 Medium
No
No
5.19 02.07.2020 SB2020070218
#VU29473 - Improper input validation
CVE-2020-14459
CWE-20 Medium
No
No
5.19 02.07.2020 SB2020070218
#VU29472 - Improper Privilege Management
CVE-2020-14460
CWE-269 Medium
No
No
5.9.8, 5.16.5, 5.17.3, 5.18.1, 5.19 02.07.2020 SB2020070219
#VU29471 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-14452
CWE-22 Medium
No
No
5.21 02.07.2020 SB2020070216
#VU34209 - Improper input validation
CVE-2017-18920
CWE-20 High
No
No
3.6.2 19.06.2020 SB2020061950
#VU30176 - Insufficient Session Expiration
CVE-2017-18905
CWE-613 Medium
No
No
3.10.2 19.06.2020 SB2020061926
#VU30185 - Improper Certificate Validation
CVE-2017-18918
CWE-295 Medium
No
No
3.7.3 19.06.2020 SB2020061928
#VU30186 - Improper Authentication
CVE-2017-18919
CWE-287 Medium
No
No
3.6.3 19.06.2020 SB2020061929
#VU30187 - Incorrect Permission Assignment for Critical Resource
CVE-2016-11062
CWE-732 Medium
No
No
3.5.1 19.06.2020 SB2020061930
#VU30188 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-11063
CWE-79 Low
No
No
3.5.1 19.06.2020 SB2020061930


Showing elements 1 - 20 out of 124