Known vulnerabilities in Mattermost Server - page 3

Software CPE: cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 124
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mattermost Server Mattermost Server is affected by 124 known vulnerabilities: 17 high, 70 medium, 37 low Critical High Medium Low

Vulnerabilities (124)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30210 - Allocation of Resources Without Limits or Throttling
CVE-2017-18899
CWE-770 Medium
No
No
4.1.1 19.06.2020 SB2020061932
#VU30211 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2017-18900
CWE-74 High
No
No
4.0.4 19.06.2020 SB2020061933
#VU30212 - Exposure of sensitive information to an unauthorized actor
CVE-2017-18901
CWE-200 Medium
No
No
4.0.4 19.06.2020 SB2020061933
#VU30213 - Exposure of sensitive information to an unauthorized actor
CVE-2017-18902
CWE-200 Medium
No
No
4.0.4 19.06.2020 SB2020061933
#VU34210 - Improper input validation
CVE-2017-18892
CWE-20 Medium
No
No
4.1.1 19.06.2020 SB2020061951
#VU34211 - Improper Certificate Validation
CVE-2017-18909
CWE-295 Medium
No
No
3.9.0 19.06.2020 SB2020061952
#VU30189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-18874
CWE-22 Medium
No
No
4.2.1 19.06.2020 SB2020061931
#VU30190 - Incorrect Permission Assignment for Critical Resource
CVE-2017-18878
CWE-732 Low
No
No
4.2.1 19.06.2020 SB2020061931
#VU30191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18879
CWE-79 Low
No
No
4.2.1 19.06.2020 SB2020061931
#VU30192 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18880
CWE-79 Low
No
No
4.2.1 19.06.2020 SB2020061931
#VU30193 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18881
CWE-79 Low
No
No
4.2.1 19.06.2020 SB2020061931
#VU30194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18882
CWE-79 Low
No
No
4.2.1 19.06.2020 SB2020061931
#VU30195 - Insufficient Entropy
CVE-2017-18883
CWE-331 High
No
No
4.2.1 19.06.2020 SB2020061931
#VU30196 - Improper Privilege Management
CVE-2017-18884
CWE-269 High
No
No
4.2.1 19.06.2020 SB2020061931
#VU30197 - Improper Privilege Management
CVE-2017-18885
CWE-269 High
No
No
4.2.1 19.06.2020 SB2020061931
#VU30198 - Incorrect Permission Assignment for Critical Resource
CVE-2017-18886
CWE-732 High
No
No
4.2.1 19.06.2020 SB2020061931
#VU30199 - Exposure of sensitive information to an unauthorized actor
CVE-2017-18887
CWE-200 Medium
No
No
4.2.1 19.06.2020 SB2020061931
#VU30200 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-18888
CWE-89 High
No
No
4.2.1 19.06.2020 SB2020061931
#VU30201 - Improper input validation
CVE-2017-18889
CWE-20 Low
No
No
4.2.1 19.06.2020 SB2020061931
#VU30219 - Incorrect Permission Assignment for Critical Resource
CVE-2017-18872
CWE-732 Low
No
No
4.4.3 19.06.2020 SB2020061934


Showing elements 41 - 60 out of 124