Known vulnerabilities in Mattermost Server - page 4

Software CPE: cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 124
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mattermost Server Mattermost Server is affected by 124 known vulnerabilities: 17 high, 70 medium, 37 low Critical High Medium Low

Vulnerabilities (124)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30202 - Improper input validation
CVE-2017-18890
CWE-20 Low
No
No
4.2.1 19.06.2020 SB2020061931
#VU30220 - Improper input validation
CVE-2017-18873
CWE-20 Medium
No
No
4.2.1 19.06.2020 SB2020061931
#VU30221 - Incorrect Permission Assignment for Critical Resource
CVE-2018-21252
CWE-732 Low
No
No
5.1.1 19.06.2020 SB2020061935
#VU34212 - Incorrect Permission Assignment for Critical Resource
CVE-2018-21256
CWE-732 Low
No
No
5.1.0 19.06.2020 SB2020061953
#VU30222 - Incorrect Permission Assignment for Critical Resource
CVE-2017-18875
CWE-732 Medium
No
No
4.2.1 19.06.2020 SB2020061931
#VU30223 - Incorrect Permission Assignment for Critical Resource
CVE-2017-18876
CWE-732 Medium
No
No
4.2.1 19.06.2020 SB2020061931
#VU30224 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18877
CWE-79 Low
No
No
4.2.1 19.06.2020 SB2020061931
#VU30225 - Resource exhaustion
CVE-2018-21250
CWE-400 Medium
No
No
5.2.2 19.06.2020 SB2020061936
#VU30226 - Missing Authorization
CVE-2018-21251
CWE-862 High
No
No
5.1.1 19.06.2020 SB2020061935
#VU30227 - Incorrect Permission Assignment for Critical Resource
CVE-2018-21253
CWE-732 Low
No
No
5.0.2 19.06.2020 SB2020061937
#VU30228 - Improper input validation
CVE-2018-21259
CWE-20 Medium
No
No
4.10.1 19.06.2020 SB2020061938
#VU30229 - Exposure of sensitive information to an unauthorized actor
CVE-2018-21260
CWE-200 Low
No
No
4.8.1 19.06.2020 SB2020061939
#VU30230 - Incorrect Permission Assignment for Critical Resource
CVE-2018-21261
CWE-732 Low
No
No
4.8.1 19.06.2020 SB2020061939
#VU30231 - Improper input validation
CVE-2018-21262
CWE-20 Medium
No
No
4.7.3 19.06.2020 SB2020061940
#VU30236 - Incorrect Permission Assignment for Critical Resource
CVE-2019-20879
CWE-732 Low
No
No
5.7.2 19.06.2020 SB2020061942
#VU30237 - Resource exhaustion
CVE-2019-20880
CWE-400 Medium
No
No
5.7.2 19.06.2020 SB2020061942
#VU30238 - Incorrect Permission Assignment for Critical Resource
CVE-2019-20887
CWE-732 Low
No
No
5.7.1 19.06.2020 SB2020061943
#VU30239 - Missing release of memory after effective lifetime
CVE-2019-20888
CWE-401 Medium
No
No
5.6.3 19.06.2020 SB2020061944
#VU30240 - Incorrect Default Permissions
CVE-2019-20889
CWE-276 Medium
No
No
5.6.3 19.06.2020 SB2020061944
#VU34217 - Incorrect Permission Assignment for Critical Resource
CVE-2018-21254
CWE-732 Low
No
No
5.1.0 19.06.2020 SB2020061953


Showing elements 61 - 80 out of 124