Hallo Welt! Gmbh

16 CVEs across 2 Hallo Welt! Gmbh products. Browse Hallo Welt! Gmbh vulnerabilities, severities, and proof-of-concept exploits.

Hallo Welt! Gmbh products with known CVEs

ProductCVEs
Bluespice15
Common User Interface Component1
Hallo Welt! Gmbh CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-247322026-03-04Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extensi…
CVE-2025-58114Medium4.82025-09-19Improper Input Validation vulnerability in Hallo Welt! GmbH BlueSpice (Extension:CognitiveProcessDesigner) allows Cross-Site Scripting (XSS).This issue affects…
CVE-2025-57880Medium5.42025-09-19Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceWhoIsOnline) allows Cross-Site Scripting (XSS). This is…
CVE-2025-48007Medium6.42025-09-19Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceAvatars) allows Cross-Site Scripting (XSS). This issue…
CVE-2025-46703Medium6.42025-09-19Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-Site Scripting (XSS). This issue affect…
CVE-2023-42431Low2.12023-10-30Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbitrary HTML into the profile image dialo…
CVE-2022-42001Low3.32022-11-15Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary…
CVE-2022-42000Low3.32022-11-15Cross-site Scripting (XSS) vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HTML into th…
CVE-2022-41814Low3.32022-11-15Cross-site Scripting (XSS) vulnerability in BlueSpiceFoundation extension of BlueSpice allows user with regular account and edit permissions to inject arbitrar…
CVE-2022-41789Low3.32022-11-15Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML into the…
CVE-2022-41611Low2.32022-11-15Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to inject arbitrary HTML into the main navig…
CVE-2022-3958Low3.32022-11-15Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inject arbitra…
CVE-2022-3895Medium4.02022-11-15Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).
CVE-2022-3893Low2.32022-11-15Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the cus…
CVE-2022-2511Medium4.32022-07-22Cross-site Scripting (XSS) vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the…
CVE-2022-2510Medium4.32022-07-22Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML (XSS) on page "Sp…