HA
Product
Hawtio
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 1Low 0
Watch
Add Hawtio to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-9827 | 9.8 | Jul 3 | Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrary host via the initial /proxy/… Affected: through 2.5.0 |
| CVE-2014-0121 | 9.8 | Dec 29 | The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter Affected: through 1.2.2 |
| CVE-2017-2589 | 9.0 | Jul 26 | It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed… Affected: 1.4.0 |
| CVE-2014-0120 | 8.8 | Dec 29 | Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run… Affected: through 1.2.2 |
| CVE-2017-7556 | 8.8 | Aug 17 | Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script… Affected: 1.5.3 |
| CVE-2017-2617 | 7.8 | May 22 | hawtio before version 1.5.5 is vulnerable to remote code execution via file upload Affected: before 1.5.5 |
| CVE-2017-2594 | 7.5 | May 8 | hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace Affected: through 1.4.68 |
| CVE-2023-33544 | 5.5 | Jun 1 | hawtio 2.17.2 is vulnerable to Path Traversal Affected: 2.17.2 |
Showing 8