MS
Product
Mattermost Server
489
CVEs
0
On KEV
9.9
Max CVSS
3
New 30D
Severity mix
Critical 17High 85Medium 345Low 42
Watch
Add Mattermost Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-18909 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 3.9.0 when SAML is used Affected: before 3.9.0 |
| CVE-2019-20888 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5 Affected: before 4.10.5; 5.5.0 before 5.5.2; 5.6.0 before 5.6.3; 5.7.0; 5.7.0; 5.7.0; +3 more |
| CVE-2019-20886 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.8.0 Affected: before 5.8.0 |
| CVE-2019-20885 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.8.0 Affected: before 5.8.0 |
| CVE-2019-20880 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7 Affected: before 4.10.7; 5.6.0 before 5.6.5; 5.7.0 before 5.7.2; 5.8.0; 5.8.0; 5.8.0; +1 more |
| CVE-2018-21262 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 4.7.3 Affected: before 4.7.3 |
| CVE-2018-21258 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.1 Affected: before 5.1.0 |
| CVE-2018-21248 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.4.0 Affected: before 5.4.0 |
| CVE-2017-18871 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2 Affected: before 4.2.2; 4.3.0 before 4.3.4; 4.4.0 before 4.4.5; 4.5.0; 4.5.0; 4.5.0; +1 more |
| CVE-2019-20874 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8 Affected: before 4.10.8; 5.7.0 before 5.7.3; 5.8.0 before 5.8.1; 5.9.0; 5.9.0; 5.9.0; +1 more |
| CVE-2019-20871 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8 Affected: before 4.10.8; 5.7.0 before 5.7.3; 5.8.0 before 5.8.1; 5.9.0; 5.9.0; 5.9.0; +1 more |
| CVE-2019-20868 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.11.0 Affected: before 4.10.8; 5.7.0 before 5.7.3; 5.8.0 before 5.8.1; 5.9.0; 5.9.0; 5.9.0; +1 more |
| CVE-2019-20863 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.13.0 Affected: before 5.13.0 |
| CVE-2019-20862 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.13.0 Affected: before 5.13.0 |
| CVE-2019-20859 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.15.0 Affected: before 4.10.8; 5.7.0 before 5.7.3; 5.8.0 before 5.8.1; 5.9.0; 5.9.0; 5.9.0; +1 more |
| CVE-2019-20858 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.15.0 Affected: before 5.15.0 |
| CVE-2019-20857 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.16.0 Affected: before 5.16.0 |
| CVE-2019-20855 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6 Affected: before 5.9.6; 5.14.0 before 5.14.5; 5.15.0 before 5.15.2; 5.16.0 before 5.16.1 |
| CVE-2019-20854 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.17.0 Affected: before 5.17.0 |
| CVE-2020-14459 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.19.0 Affected: before 5.19.0 |
| CVE-2020-14458 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.19.0 Affected: before 5.19.0 |
| CVE-2020-14453 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.21.0 Affected: before 5.21.0 |
| CVE-2020-14450 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.22.0 Affected: before 5.22.0 |
| CVE-2020-14448 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.23.0 Affected: before 5.23.0 |
| CVE-2020-14447 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.23.0 Affected: before 5.23.0 |
| CVE-2019-20846 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.18.0 Affected: before 5.18.0 |
| CVE-2019-20845 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.18.0 Affected: before 5.18.0 |
| CVE-2019-20843 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7 Affected: before 5.9.7; 5.15.0 before 5.15.4; 5.16.0 before 5.16.4; 5.17.0 before 5.17.2; 5.18.0; 5.18.0; +2 more |
| CVE-2019-20881 | 7.3 | Jun 19 | An issue was discovered in Mattermost Server before 5.8.0 Affected: before 5.8.0 |
| CVE-2026-6739 | 7.2 | Jun 12 | Mattermost: Delegated admins could patch protected default system roles Affected: 10.11.0 before 10.11.17; 11.5.0 before 11.5.5; 11.6.0 before 11.6.2 |
| CVE-2025-9079 | 7.2 | Sep 19 | Admin RCE via prepackaged plugins by way of misconfigured imports directory Affected: 9.11.0 before 9.11.18; 10.5.0 before 10.5.9; 10.8.0 before 10.8.4; 10.9.0 before 10.9.4; 10.10.0 before 10.10.2 |
| CVE-2019-20842 | 7.2 | Jun 19 | An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7 Affected: before 5.9.7; 5.15.0 before 5.15.4; 5.16.0 before 5.16.4; 5.17.0 before 5.17.2; 5.18.0; 5.18.0; +2 more |
| CVE-2026-8821 | 7.1 | Sep 14 | Playbooks run owner channel membership permission bypass Affected: 10.11.0 before 10.11.23; 11.7.0 before 11.7.8; 11.8.0 before 11.8.5; 11.9.0 before 11.9.1 |
| CVE-2026-3473 | 7.1 | May 22 | Improper file ownership validation in the Boards API allows unauthorised file access Affected: 10.11.0 before 10.11.15; 11.4.0 before 11.4.5; 11.5.0 before 11.5.4; 11.6.0 before 11.6.1 |
| CVE-2024-41144 | 7.1 | Aug 1 | Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5, 9.8.x <= 9.8.1 fail to properly validate synced posts, when shared channels are enabled, which allows a… Affected: 9.5.0 before 9.5.7; 9.7.0 before 9.7.6; 9.8.0 before 9.8.2; 9.9.0 |