CVE Program partner

HW

HW

API
CVEs, 365 days116 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationHW
RoleNot in the current partner list
Type-
Reports to-
Scope-

Latest CVEs · RSS

  • CVE-2026-24732 2026-03-04 · CVSS 6.6
    Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extensio
  • CVE-2025-58114 2025-09-19 · CVSS 5.9
    Improper Input Validation vulnerability in Hallo Welt! GmbH BlueSpice (Extension:CognitiveProcessDesigner) allows Cross-Site Scripting (XSS).This issue affects
  • CVE-2025-57880 2025-09-19 · CVSS 5.9
    Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceWhoIsOnline) allows Cross-Site Scripting (XSS). This iss
  • CVE-2025-48007 2025-09-19 · CVSS 5.9
    Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceAvatars) allows Cross-Site Scripting (XSS). This issue a
  • CVE-2025-46703 2025-09-19 · CVSS 5.9
    Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-Site Scripting (XSS). This issue affects
  • CVE-2023-42431 2023-10-30 · CVSS 2.1
    Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbitrary HTML into the profile image dialog
  • CVE-2022-42001 2022-11-15 · CVSS 3.3
    Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary
  • CVE-2022-42000 2022-11-15 · CVSS 3.3
    Cross-site Scripting (XSS) vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HTML into the
  • CVE-2022-41814 2022-11-15 · CVSS 3.3
    Cross-site Scripting (XSS) vulnerability in BlueSpiceFoundation extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary
  • CVE-2022-41789 2022-11-15 · CVSS 3.3
    Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML into the d
  • CVE-2022-41611 2022-11-15 · CVSS 2.3
    Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to inject arbitrary HTML into the main naviga
  • CVE-2022-3958 2022-11-15 · CVSS 3.3
    Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inject arbitrar
  • CVE-2022-3895 2022-11-15 · CVSS 4.0
    Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).
  • CVE-2022-3893 2022-11-15 · CVSS 2.3
    Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the cust
  • CVE-2022-2510 2022-07-22 · CVSS 4.3
    Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML (XSS) on page "Spe
  • CVE-2022-2511 2022-07-22 · CVSS 4.3
    Cross-site Scripting (XSS) vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the t

All CVE Program partners