Login Request a demo
HA
Product
Hawtio
by Hawt · last CVE Jun 1, 2023
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 3High 4Medium 1Low 0
Severity
All severities8Critical3High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Hawtio to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-0120
8.8
1%
Dec 29
Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run…
Affected: through 1.2.2
CVE-2017-7556
8.8
1%
Aug 17
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script…
Affected: 1.5.3
CVE-2017-2617
7.8
2%
May 22
hawtio before version 1.5.5 is vulnerable to remote code execution via file upload
Affected: before 1.5.5
CVE-2017-2594
7.5
2%
May 8
hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace
Affected: through 1.4.68
Showing 4