O Dyn maintains a narrowly scoped project portfolio centered on Collabtive, a web-based collaboration and project-management application. The vendor's vulnerability disclosures reflect the attack surface of web application development, though the structural context and specific weakness patterns remain limited at this volume. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by O Dyn over time
Signals from CVEs in this vendor scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-4269HIGH SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action. | Nov 17, 2010 | 7.5 | 32 | NO | YES |
CVE-2010-5285MEDIUM Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add admini | Nov 26, 2012 | 6.8 | 30 | NO | YES |
CVE-2013-6872MEDIUM SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectp | Jan 21, 2014 | 6.5 | 29 | NO | YES |
CVE-2021-3298MEDIUM Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter. | Jan 29, 2021 | 5.4 | 27 | NO | YES |
CVE-2014-3246MEDIUM SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via the folder parameter in a fileview_list action to manageajax.p | May 13, 2014 | 6.5 | 26 | NO | YES |
CVE-2013-5027CRITICAL Collabtive 1.0 has incorrect access control | Dec 27, 2019 | 9.8 | 24 | NO | NO |
CVE-2010-5284MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user pr | Nov 26, 2012 | 4.3 | 24 | NO | YES |
CVE-2015-0258HIGH Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary co | Feb 17, 2020 | 8.8 | 23 | NO | NO |
CVE-2014-3247MEDIUM Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the desc parameter in an Add project (addpro | May 15, 2014 | 4.3 | 21 | NO | YES |
CVE-2012-2670MEDIUM manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions and upload and execute a | Jun 17, 2012 | 6.5 | 20 | NO | NO |
Signals from CVEs in this vendor scope (16 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by O Dyn.
Media articles that mention a CVE ID that affects a product developed by O Dyn — matched by CVE ID, not by vendor name.