HA
Vendor
Hawt
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-33544 | HA Hawtio Hawt | 5.5 | Jun 1 | hawtio 2.17.2 is vulnerable to Path Traversal |
| CVE-2019-9827 | HA Hawtio Hawt | 9.8 | Jul 3 | Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrary host via the initial /proxy/… |
| CVE-2017-2589 | HA Hawtio Hawt | 9.0 | Jul 26 | It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed… |
| CVE-2017-2617 | HA Hawtio Hawt | 7.8 | May 22 | hawtio before version 1.5.5 is vulnerable to remote code execution via file upload |
| CVE-2017-2594 | HA Hawtio Hawt | 7.5 | May 8 | hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace |
| CVE-2014-0121 | HA Hawtio Hawt | 9.8 | Dec 29 | The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter |
| CVE-2014-0120 | HA Hawtio Hawt | 8.8 | Dec 29 | Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run… |
| CVE-2017-7556 | HA Hawtio Hawt | 8.8 | Aug 17 | Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script… |