Known vulnerabilities in Mattermost Server - page 5

Software CPE: cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 124
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mattermost Server Mattermost Server is affected by 124 known vulnerabilities: 17 high, 70 medium, 37 low Critical High Medium Low

Vulnerabilities (124)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34213 - Improper input validation
CVE-2018-21264
CWE-20 High
No
No
- 19.06.2020 SB2020061969
#VU34214 - Incorrect Permission Assignment for Critical Resource
CVE-2017-18870
CWE-732 Low
No
No
- 19.06.2020 SB2020061970
#VU34215 - Improper input validation
CVE-2017-18871
CWE-20 Medium
No
No
- 19.06.2020 SB2020061970
#VU34216 - Improper input validation
CVE-2018-21249
CWE-20 Low
No
No
5.3.0 19.06.2020 SB2020061954
#VU34218 - Incorrect Permission Assignment for Critical Resource
CVE-2018-21255
CWE-732 Low
No
No
5.1.0 19.06.2020 SB2020061953
#VU34219 - Missing Authorization
CVE-2018-21257
CWE-862 Medium
No
No
5.1.0 19.06.2020 SB2020061953
#VU34220 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-21258
CWE-74 Medium
No
No
5.1.0 19.06.2020 SB2020061953
#VU34221 - Improper Authentication
CVE-2018-21263
CWE-287 High
No
No
- 19.06.2020 SB2020061969
#VU34222 - Insufficiently Protected Credentials
CVE-2019-20881
CWE-522 Medium
No
No
5.8.0 19.06.2020 SB2020061955
#VU34223 - Incorrect Default Permissions
CVE-2019-20882
CWE-276 Medium
No
No
5.8.0 19.06.2020 SB2020061955
#VU34224 - Incorrect Permission Assignment for Critical Resource
CVE-2019-20883
CWE-732 Low
No
No
5.8.0 19.06.2020 SB2020061955
#VU34225 - Incorrect Permission Assignment for Critical Resource
CVE-2019-20884
CWE-732 Medium
No
No
5.8.0 19.06.2020 SB2020061955
#VU34226 - Exposure of sensitive information to an unauthorized actor
CVE-2019-20885
CWE-200 Medium
No
No
5.8.0 19.06.2020 SB2020061955
#VU34227 - Improper Privilege Management
CVE-2019-20886
CWE-269 Medium
No
No
5.8.0 19.06.2020 SB2020061955
#VU34228 - Exposure of sensitive information to an unauthorized actor
CVE-2019-20890
CWE-200 Low
No
No
5.7.0 19.06.2020 SB2020061956
#VU30241 - Cross-Site Request Forgery (CSRF)
CVE-2019-20865
CWE-352 Medium
No
No
5.11.1 19.06.2020 SB2020061945
#VU30243 - Incorrect Permission Assignment for Critical Resource
CVE-2019-20869
CWE-732 Medium
No
No
5.9.1 19.06.2020 SB2020061946
#VU34232 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20866
CWE-444 Medium
No
No
5.12.0 19.06.2020 SB2020061958
#VU34233 - Improper input validation
CVE-2019-20867
CWE-20 Medium
No
No
5.11.0 19.06.2020 SB2020061959
#VU34234 - Improper input validation
CVE-2019-20870
CWE-20 Low
No
No
5.10.0 19.06.2020 SB2020061960


Showing elements 81 - 100 out of 124