Intercom
7 CVEs across 3 Intercom products. Browse Intercom vulnerabilities, severities, and proof-of-concept exploits.
Intercom products with known CVEs
Intercom CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2019-14365 | High | 7.5 | 2019-11-12 | The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack… |
CVE-2017-10819 | Medium | 5.9 | 2017-08-04 | MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an encrypted communication. |
CVE-2017-10818 | Critical | 9.8 | 2017-08-04 | MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal… |
CVE-2017-10817 | Critical | 9.8 | 2017-08-04 | MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server. |
CVE-2017-10816 | Critical | 9.8 | 2017-08-04 | SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via Relay Service Server. |
CVE-2017-10815 | High | 8.1 | 2017-08-04 | MaLion for Windows 5.2.1 and earlier (only when "Remote Control" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when "Remote Control" is installed) allo… |
CVE-2014-3881 | | | 2014-06-28 | Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary… |
CVE-2014-2006 | | | 2014-06-28 | Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspec… |