Login Request a demo
CO
Product
Collabtive
by O-dyn · last CVE Oct 22, 2024
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 1High 1Medium 7Low 0
Severity
All severities16Critical1High1Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Collabtive to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-13655
6.1
1%
Aug 31
An issue was discovered in Collabtive 3.0 and later
Affected: 3.0 and later
CVE-2024-48708
5.4
0%
Oct 22
Collabtive 3.1 is vulnerable to Cross-Site Scripting (XSS) via the name parameter in (a) file tasklist.php under action = add/edit and in (b) file admin.php under action =…
Affected: 3.1
CVE-2024-48707
5.4
0%
Oct 22
Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit within managemilestone.php file and (b) action=addpro within…
Affected: 3.1
CVE-2024-48706
5.4
0%
Oct 22
Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the title parameter with action=add or action=editform within the (a) managemessage.php file and (b) managetask.php…
Affected: 3.1
CVE-2021-3298
5.4
2%
Jan 29
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter
Affected: 3.1
CVE-2019-8935
5.4
1%
Feb 19
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter
Affected: 3.1
CVE-2024-46240
4.8
0%
Oct 22
Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters under action=addcust within admin.php file
Affected: 3.1
Showing 7