HI
Product
Hipchat
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Hipchat to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-14586 | 9.8 | Nov 27 | The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing Affected: 4.0 before 4.30 |
| CVE-2018-1000418 | 8.8 | Jan 9 | An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test… Affected: through 2.2.0 |
| CVE-2018-1000419 | 6.5 | Jan 9 | An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain… Affected: through 2.2.0 |
| CVE-2017-8058 | 5.9 | May 5 | Acceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept… Affected: through 3.16.1 |
| CVE-2015-5603 | – | Sep 21 | The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity… Affected: through 6.29.2 |
Showing 5