TO
Product
Toolbox
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 4Low 0
Watch
Add Toolbox to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-43012 | 9.8 | Apr 17 | In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible Affected: before 2.6 |
| CVE-2020-25207 | 9.8 | Nov 16 | JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler Affected: before 1.18 |
| CVE-2022-48481 | 7.8 | Apr 28 | In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible Affected: before 1.28 |
| CVE-2025-43013 | 7.5 | Apr 17 | In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible Affected: before 2.6 |
| CVE-2020-25013 | 7.5 | Nov 16 | JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler Affected: before 1.18 |
| CVE-2020-15827 | 7.5 | Aug 8 | In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file Affected: 1.17 before 1.17.6856 |
| CVE-2019-18368 | 7.3 | Oct 31 | In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible Affected: before 1.15.5666 |
| CVE-2025-43014 | 6.5 | Apr 17 | In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation Affected: before 2.6 |
| CVE-2025-42921 | 6.5 | Apr 17 | In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin Affected: before 2.6 |
| CVE-2019-14959 | 5.9 | Oct 2 | JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection Affected: before 1.15.5605 |
| CVE-2024-24943 | 5.5 | Feb 6 | In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image Affected: before 2.2 |
Showing 11