Hipchat
Vendor:
First CVE: Sep 21, 2015 · Active for 10 years
5
Total CVEs
More Total CVEs than 77% of tracked products
1.7
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 50% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Hipchat over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 21, 2015
10 years ago
Most Recent CVE
Jan 9, 2019
2,753 days ago
CVE Severity & Scoring
Hipchat5 CVEs
60%
20%
20%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network4 (80.0%)
Unknown1 (20.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (60.0%)
High1 (20.0%)
Unknown1 (20.0%)
User Interaction
None4 (80.0%)
Unknown1 (20.0%)
Required0 (0.0%)
Privileges Required
Low2 (40.0%)
High0 (0.0%)
None2 (40.0%)
Unknown1 (20.0%)
Top CVEs
Signals from CVEs in this product scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-5603MEDIUM The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template | Sep 21, 2015 | 6.5 | 73 | NO | YES |
CVE-2017-14586CRITICAL The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing. Hipchat for Mac desktop clients at or above version 4.0 and befor | Nov 27, 2017 | 9.8 | 32 | NO | NO |
CVE-2018-1000418HIGH An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notif | Jan 9, 2019 | 8.8 | 27 | NO | NO |
CVE-2018-1000419MEDIUM An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credenti | Jan 9, 2019 | 6.5 | 22 | NO | NO |
CVE-2017-8058MEDIUM Acceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept | May 5, 2017 | 5.9 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (5 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
20.0% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
20.0% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (5 CVEs).
Media Mentions
Signals from CVEs in this product scope (5 CVEs).
Top CNAs Publishing CVEs For Hipchat
Top CWEs
Versions
No cataloged versions.