Atlassian Hipchat
5 CVEs affecting Atlassian Hipchat. Latest disclosed: 2019-01-09. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-14586 | Critical | 9.8 | 2017-11-27 | The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing. Hipchat for Mac desktop clients at or above… |
CVE-2018-1000418 | High | 8.8 | 2019-01-09 | An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read acce… |
CVE-2018-1000419 | Medium | 6.5 | 2019-01-09 | An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read acce… |
CVE-2017-8058 | Medium | 5.9 | 2017-05-05 | Acceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS allows a man-in-the-middle and/or physically proximate attacker t… |
CVE-2015-5603 | | 2015-09-21 | The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related… |