Passwordstate

Vendor:

First CVE: Aug 1, 2018 · Active for 7 years

13

Total CVEs

More Total CVEs than 91% of tracked products

3.3

Avg CVEs / Year

Higher CVE frequency than 81% of tracked products

6.0

Avg CVSS

Higher Avg CVSS than 20% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Passwordstate over time

Volume of CVEsAvg CVSS Base Score

First CVE

Aug 1, 2018

7 years ago

Most Recent CVE

Nov 13, 2023

984 days ago

CVE Severity & Scoring

Passwordstate13 CVEs

77%

15%

All CVEs352,294 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local1 (7.7%)

Network11 (84.6%)

Unknown0 (0.0%)

Physical1 (7.7%)

Adjacent Network0 (0.0%)

Attack Complexity

Low13 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None9 (69.2%)

Unknown0 (0.0%)

Required4 (30.8%)

Privileges Required

Low7 (53.8%)

High1 (7.7%)

None5 (38.5%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (13 CVEs).

13 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2022-3875HIGH A vulnerability classified as critical was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This vulnerability affects unknown code of the component	Dec 19, 2022	7.5	25	NO	NO
CVE-2020-26061HIGH ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability. The ResetPassword function does not validate whether the	Oct 5, 2020	7.5	25	NO	NO
CVE-2022-4613MEDIUM A vulnerability was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as critical. This issue affects some unknown processing of the co	Dec 19, 2022	6.5	23	NO	NO
CVE-2022-4612MEDIUM A vulnerability has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as problematic. This vulnerability affects unknown code. The	Dec 19, 2022	6.5	23	NO	NO
CVE-2022-25570MEDIUM In Click Studios (SA) Pty Ltd Passwordstate 9435, users with access to a passwordlist can gain access to additional password lists without permissions. Specifically, an authenticat	Mar 21, 2022	6.5	22	NO	NO
CVE-2020-27747MEDIUM An issue was discovered in Click Studios Passwordstate 8.9 (Build 8973).If the user of the system has assigned himself a PIN code for entering from a mobile device using the built-	Oct 29, 2020	6.8	22	NO	NO
CVE-2022-4611MEDIUM A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipul	Dec 19, 2022	5.3	21	NO	NO
CVE-2022-4610MEDIUM A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected by this issue is some unkno	Dec 19, 2022	5.5	21	NO	NO
CVE-2022-3877MEDIUM A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected is an unknown function of the co	Dec 19, 2022	5.4	20	NO	NO
CVE-2022-3876MEDIUM A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This issue affects some unknown proc	Dec 19, 2022	6.5	17	NO	NO

View all 13 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (13 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (13 CVEs).

Media Mentions

Signals from CVEs in this product scope (13 CVEs).

Top CNAs Publishing CVEs For Passwordstate

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
9.7	1	3.5	0.2%
9.5.8.4	4	6.0	0.8%
9.5	4	6.0	0.8%
9.4	1	6.5	0.8%
8.9	1	6.8	1.1%