ST
Vendor
StrangeBee
2 products with CVEs on record
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-63098
TH
Thehive
Strangebee
5.3
0%
Jul 17TheHive 4.1.24 Unauthenticated Information Disclosure via /api/status Endpoint
CVE-2025-48738
TH
TheHive
StrangeBee
6.9
1%
May 23An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows unauthenticated remote…
CVE-2025-48739
TH
TheHive
StrangeBee
4.6
0%
May 23A Server-Side Request Forgery (SSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows remote…
CVE-2025-48740
TH
TheHive
StrangeBee
5.9
0%
May 23A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows a remote…
CVE-2025-48741
TH
TheHive
StrangeBee
6.8
0%
May 23A Broken Access Control vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, and 5.4.0 before 5.4.10 allows remote, authenticated, and unprivileged users…
CVE-2024-22877
TH
Thehive
Strangebee
5.4
0%
Jan 19StrangeBee TheHive 5.2.0 to 5.2.8 is vulnerable to Cross Site Scripting (XSS) in the case reporting functionality
CVE-2024-22876
TH
Thehive
Strangebee
5.4
0%
Jan 19StrangeBee TheHive 5.1.0 to 5.1.9 and 5.2.0 to 5.2.8 is vulnerable to Cross Site Scripting (XSS) in the case attachment functionality which enables an attacker to upload a…
CVE-2023-39069
CO
Cortex
Strangebee
9.8
1%
Sep 11An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Active Directory authentication mechanism
CVE-2017-18376
TH
Thehive
Strangebee
8.8
2%
Jun 2An improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1 allows users with read-only or read/write access to escalate their privileges to the…