Known vulnerabilities in Mattermost Server - page 2

Software CPE: cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 124
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mattermost Server Mattermost Server is affected by 124 known vulnerabilities: 17 high, 70 medium, 37 low Critical High Medium Low

Vulnerabilities (124)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30177 - Improper Authentication
CVE-2017-18906
CWE-287 High
No
No
3.10.2 19.06.2020 SB2020061926
#VU30178 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18907
CWE-79 Low
No
No
3.10.2 19.06.2020 SB2020061926
#VU30179 - Improper Authentication
CVE-2017-18908
CWE-287 High
No
No
3.10.2 19.06.2020 SB2020061926
#VU30180 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18913
CWE-79 Low
No
No
3.8.2 19.06.2020 SB2020061927
#VU30181 - Improper Check for Unusual or Exceptional Conditions
CVE-2017-18914
CWE-754 Medium
No
No
3.8.2 19.06.2020 SB2020061927
#VU30182 - Incorrect Default Permissions
CVE-2017-18915
CWE-276 High
No
No
3.8.2 19.06.2020 SB2020061927
#VU30183 - Incorrect Permission Assignment for Critical Resource
CVE-2017-18916
CWE-732 Medium
No
No
3.8.2 19.06.2020 SB2020061927
#VU30184 - Use of Password Hash With Insufficient Computational Effort
CVE-2017-18917
CWE-916 Medium
No
No
3.8.2 19.06.2020 SB2020061927
#VU30208 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-18897
CWE-601 Low
No
No
4.1.1 19.06.2020 SB2020061932
#VU30209 - Improper Resource Shutdown or Release
CVE-2017-18898
CWE-404 Medium
No
No
4.1.1 19.06.2020 SB2020061932
#VU30214 - Cross-Site Request Forgery (CSRF)
CVE-2017-18903
CWE-352 Medium
No
No
3.10.2 19.06.2020 SB2020061926
#VU30215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18904
CWE-79 Low
No
No
3.10.2 19.06.2020 SB2020061926
#VU30216 - Incorrect Permission Assignment for Critical Resource
CVE-2017-18910
CWE-732 Low
No
No
3.8.2 19.06.2020 SB2020061927
#VU30217 - Improper Certificate Validation
CVE-2017-18911
CWE-295 High
No
No
3.8.2 19.06.2020 SB2020061927
#VU30218 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-18912
CWE-22 High
No
No
3.8.2 19.06.2020 SB2020061927
#VU30203 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-18891
CWE-601 Low
No
No
4.1.1 19.06.2020 SB2020061932
#VU30204 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18893
CWE-79 Low
No
No
4.1.1 19.06.2020 SB2020061932
#VU30205 - Incorrect Permission Assignment for Critical Resource
CVE-2017-18894
CWE-732 High
No
No
4.1.1 19.06.2020 SB2020061932
#VU30206 - Exposure of sensitive information to an unauthorized actor
CVE-2017-18895
CWE-200 Medium
No
No
4.1.1 19.06.2020 SB2020061932
#VU30207 - Incorrect Permission Assignment for Critical Resource
CVE-2017-18896
CWE-732 Medium
No
No
4.1.1 19.06.2020 SB2020061932


Showing elements 21 - 40 out of 124