Login Request a demo
HA
Product
Hawtio
by Hawt · last CVE Jun 1, 2023
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 3High 4Medium 1Low 0
Severity
All severities8Critical3High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Hawtio to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-9827
9.8
27%
Jul 3
Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrary host via the initial /proxy/…
Affected: through 2.5.0
CVE-2014-0121
9.8
4%
Dec 29
The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter
Affected: through 1.2.2
CVE-2017-2589
9.0
1%
Jul 26
It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed…
Affected: 1.4.0
Showing 3