MS
Product
Mattermost Server
501
CVEs
0
On KEV
9.9
Max CVSS
15
New 30D
Severity mix
Critical 17High 86Medium 356Low 41
Watch
Add Mattermost Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-18909 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 3.9.0 when SAML is used Affected: before 3.9.0 |
| CVE-2019-20888 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5 Affected: before 4.10.5; 5.5.0 before 5.5.2; 5.6.0 before 5.6.3; 5.7.0; 5.7.0; 5.7.0; +3 more |
| CVE-2019-20886 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.8.0 Affected: before 5.8.0 |
| CVE-2019-20885 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.8.0 Affected: before 5.8.0 |
| CVE-2019-20880 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7 Affected: before 4.10.7; 5.6.0 before 5.6.5; 5.7.0 before 5.7.2; 5.8.0; 5.8.0; 5.8.0; +1 more |
| CVE-2018-21262 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 4.7.3 Affected: before 4.7.3 |
| CVE-2018-21258 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.1 Affected: before 5.1.0 |
| CVE-2018-21248 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.4.0 Affected: before 5.4.0 |
| CVE-2017-18871 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2 Affected: before 4.2.2; 4.3.0 before 4.3.4; 4.4.0 before 4.4.5; 4.5.0; 4.5.0; 4.5.0; +1 more |
| CVE-2019-20874 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8 Affected: before 4.10.8; 5.7.0 before 5.7.3; 5.8.0 before 5.8.1; 5.9.0; 5.9.0; 5.9.0; +1 more |
| CVE-2019-20871 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8 Affected: before 4.10.8; 5.7.0 before 5.7.3; 5.8.0 before 5.8.1; 5.9.0; 5.9.0; 5.9.0; +1 more |
| CVE-2019-20868 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.11.0 Affected: before 4.10.8; 5.7.0 before 5.7.3; 5.8.0 before 5.8.1; 5.9.0; 5.9.0; 5.9.0; +1 more |
| CVE-2019-20863 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.13.0 Affected: before 5.13.0 |
| CVE-2019-20862 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.13.0 Affected: before 5.13.0 |
| CVE-2019-20859 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.15.0 Affected: before 4.10.8; 5.7.0 before 5.7.3; 5.8.0 before 5.8.1; 5.9.0; 5.9.0; 5.9.0; +1 more |
| CVE-2019-20858 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.15.0 Affected: before 5.15.0 |
| CVE-2019-20857 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.16.0 Affected: before 5.16.0 |
| CVE-2019-20855 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6 Affected: before 5.9.6; 5.14.0 before 5.14.5; 5.15.0 before 5.15.2; 5.16.0 before 5.16.1 |
| CVE-2019-20854 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.17.0 Affected: before 5.17.0 |
| CVE-2020-14459 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.19.0 Affected: before 5.19.0 |
| CVE-2020-14458 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.19.0 Affected: before 5.19.0 |
| CVE-2020-14453 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.21.0 Affected: before 5.21.0 |
| CVE-2020-14450 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.22.0 Affected: before 5.22.0 |
| CVE-2020-14448 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.23.0 Affected: before 5.23.0 |
| CVE-2020-14447 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.23.0 Affected: before 5.23.0 |
| CVE-2019-20846 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.18.0 Affected: before 5.18.0 |
| CVE-2019-20845 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.18.0 Affected: before 5.18.0 |
| CVE-2019-20843 | 7.5 | Jun 19 | An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7 Affected: before 5.9.7; 5.15.0 before 5.15.4; 5.16.0 before 5.16.4; 5.17.0 before 5.17.2; 5.18.0; 5.18.0; +2 more |
| CVE-2019-20881 | 7.3 | Jun 19 | An issue was discovered in Mattermost Server before 5.8.0 Affected: before 5.8.0 |
| CVE-2026-6739 | 7.2 | Jun 12 | Mattermost: Delegated admins could patch protected default system roles Affected: 10.11.0 before 10.11.17; 11.5.0 before 11.5.5; 11.6.0 before 11.6.2 |
| CVE-2025-9079 | 7.2 | Sep 19 | Admin RCE via prepackaged plugins by way of misconfigured imports directory Affected: 9.11.0 before 9.11.18; 10.5.0 before 10.5.9; 10.8.0 before 10.8.4; 10.9.0 before 10.9.4; 10.10.0 before 10.10.2 |
| CVE-2019-20842 | 7.2 | Jun 19 | An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7 Affected: before 5.9.7; 5.15.0 before 5.15.4; 5.16.0 before 5.16.4; 5.17.0 before 5.17.2; 5.18.0; 5.18.0; +2 more |
| CVE-2026-16453 | 7.1 | Oct 16 | Mattermost SAML RelayState forgery allows unauthorized team membership Affected: 11.7.0 before 11.7.10; 11.8.0 before 11.8.6; 11.9.0 before 11.9.2; 11.10.0 |
| CVE-2026-8821 | 7.1 | Sep 14 | Playbooks run owner channel membership permission bypass Affected: 10.11.0 before 10.11.23; 11.7.0 before 11.7.8; 11.8.0 before 11.8.5; 11.9.0 before 11.9.1 |
| CVE-2026-3473 | 7.1 | May 22 | Improper file ownership validation in the Boards API allows unauthorised file access Affected: 10.11.0 before 10.11.15; 11.4.0 before 11.4.5; 11.5.0 before 11.5.4; 11.6.0 before 11.6.1 |
| CVE-2024-41144 | 7.1 | Aug 1 | Malicious remote can create/update/delete arbitrary posts in arbitrary channels Affected: 9.5.0 before 9.5.7; 9.7.0 before 9.7.6; 9.8.0 before 9.8.2; 9.9.0 |
The 500 most important CVEs for this product (exploited first, then by severity)