CI
Product
Communications Instant Messaging Server
On CISA KEVExploited in the wild
57
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 14High 38Medium 5Low 0
Watch
Add Communications Instant Messaging Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-25329 | 7.0 | Mar 1 | Incomplete fix for CVE-2020-9484 Affected: 10.0.1.5.0 |
| CVE-2020-9484 | 7.0 | May 20 | When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a… Affected: 10.0.1.4.0 |
| CVE-2021-43797 | 6.5 | Dec 9 | HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling Affected: 8.1 |
| CVE-2019-10219 | 6.1 | Nov 8 | A vulnerability was found in Hibernate-Validator Affected: 10.0.1.5.0 |
| CVE-2021-33037 | 5.3 | Jul 12 | Incorrect Transfer-Encoding handling with HTTP/1.0 Affected: 10.0.1.5.0 |
| CVE-2019-17569 | 4.8 | Feb 24 | The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression Affected: 10.0.1.4.0 |
| CVE-2020-1935 | 4.8 | Feb 24 | In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP… Affected: 10.0.1.4.0 |