HW
Vendor
Hallo Welt! GmbH
8
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-25784 New | BL BlueSpice Hallo Welt! GmbH | 9.8 | Oct 23 | bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop |
| CVE-2026-25716 New | BL BlueSpice Hallo Welt! GmbH | 7.1 | Oct 23 | BlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking users |
| CVE-2026-24732 | BL BlueSpice Hallo Welt! GmbH | 6.6 | Mar 4 | Improper permission checks in Extension:NSFileRepo |
| CVE-2025-58114 | BL BlueSpice Hallo Welt! GmbH | 4.8 | Sep 19 | Potential XSS in Extension:CognitiveProcessDesigner |
| CVE-2025-57880 | BL BlueSpice Hallo Welt! GmbH | 5.4 | Sep 19 | Potential XSS in Extension:BlueSpiceWhoIsOnline |
| CVE-2025-48007 | BL BlueSpice Hallo Welt! GmbH | 6.4 | Sep 19 | Potential XSS in Extension:BlueSpiceAvatars |
| CVE-2025-46703 | BL BlueSpice Hallo Welt! GmbH | 6.4 | Sep 19 | Potential XSS in Extension:AtMentions |
| CVE-2023-42431 | BL BlueSpice Hallo Welt! GmbH | 5.4 | Oct 30 | Potential XSS on user preferences page |