Cryptocat
Vendor:
First CVE: Nov 4, 2019 · Active for 6 years
17
Total CVEs
More Total CVEs than 93% of tracked products
17.0
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 50% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Cryptocat over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 4, 2019
6 years ago
Most Recent CVE
Nov 14, 2019
2,444 days ago
CVE Severity & Scoring
Cryptocat17 CVEs
35%
35%
29%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network17 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low17 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None14 (82.4%)
Unknown0 (0.0%)
Required3 (17.6%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None17 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (17 CVEs).
17 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-4103CRITICAL Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input | Nov 4, 2019 | 9.8 | 37 | NO | YES |
CVE-2013-2261HIGH Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure | Nov 4, 2019 | 7.5 | 33 | NO | YES |
CVE-2013-2259CRITICAL Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview | Nov 4, 2019 | 9.8 | 25 | NO | NO |
CVE-2013-4108CRITICAL Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors. | Nov 14, 2019 | 9.8 | 24 | NO | NO |
CVE-2013-2260CRITICAL Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness | Nov 4, 2019 | 9.8 | 24 | NO | NO |
CVE-2013-4102CRITICAL Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness | Nov 4, 2019 | 9.1 | 24 | NO | NO |
CVE-2013-2257HIGH Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness | Nov 4, 2019 | 7.5 | 20 | NO | NO |
CVE-2013-2262HIGH Cryptocat strophe.js before 2.0.22 has information disclosure | Nov 4, 2019 | 7.5 | 20 | NO | NO |
CVE-2013-4100HIGH Cryptocat before 2.0.22 has Remote Denial of Service via username | Nov 4, 2019 | 7.5 | 20 | NO | NO |
CVE-2013-4105HIGH Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure | Nov 4, 2019 | 7.5 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (17 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
11.8% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (17 CVEs).
Media Mentions
Signals from CVEs in this product scope (17 CVEs).
Top CNAs Publishing CVEs For Cryptocat
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.0.18 | 1 | 9.8 | 1.5% | 0 | 0 |
| 1.1.165 | 1 | 6.1 | 1.7% | 0 | 0 |