Collabtive
Vendor:
First CVE: Nov 17, 2010 · Active for 15 years
16
Total CVEs
More Total CVEs than 93% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
6.2
Avg CVSS
Higher Avg CVSS than 28% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Collabtive over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 17, 2010
15 years ago
Most Recent CVE
Oct 22, 2024
643 days ago
CVE Severity & Scoring
Collabtive16 CVEs
81%
13%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network9 (56.3%)
Unknown7 (43.8%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (56.3%)
High0 (0.0%)
Unknown7 (43.8%)
User Interaction
None2 (12.5%)
Unknown7 (43.8%)
Required7 (43.8%)
Privileges Required
Low6 (37.5%)
High1 (6.3%)
None2 (12.5%)
Unknown7 (43.8%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-4269HIGH SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action. | Nov 17, 2010 | 7.5 | 32 | NO | YES |
CVE-2010-5285MEDIUM Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add admini | Nov 26, 2012 | 6.8 | 30 | NO | YES |
CVE-2013-6872MEDIUM SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectp | Jan 21, 2014 | 6.5 | 29 | NO | YES |
CVE-2021-3298MEDIUM Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter. | Jan 29, 2021 | 5.4 | 27 | NO | YES |
CVE-2014-3246MEDIUM SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via the folder parameter in a fileview_list action to manageajax.p | May 13, 2014 | 6.5 | 26 | NO | YES |
CVE-2013-5027CRITICAL Collabtive 1.0 has incorrect access control | Dec 27, 2019 | 9.8 | 24 | NO | NO |
CVE-2010-5284MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user pr | Nov 26, 2012 | 4.3 | 24 | NO | YES |
CVE-2015-0258HIGH Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary co | Feb 17, 2020 | 8.8 | 23 | NO | NO |
CVE-2014-3247MEDIUM Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the desc parameter in an Add project (addpro | May 15, 2014 | 4.3 | 21 | NO | YES |
CVE-2012-2670MEDIUM manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions and upload and execute a | Jun 17, 2012 | 6.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
7 CVEs
43.8% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Collabtive
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.1 | 6 | 5.3 | 0.7% | 0 | 1 |
| 1.2 | 2 | 5.4 | 1.5% | 0 | 2 |
| 1.0 | 2 | 8.2 | 1.9% | 0 | 1 |
| 0.7.6 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.7.5 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.7 | 2 | 6.5 | 2.0% | 0 | 1 |
| 0.6.5 | 5 | 6.3 | 1.7% | 0 | 4 |
| 0.6.4 | 2 | 6.5 | 2.0% | 0 | 1 |
| 0.6.3 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.6.2 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.6.1 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.6 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.5.5 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.5.1 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.4.9.1 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.4.9 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.4.8 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.4.7 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.4.6 | 1 | 6.5 | 2.5% | 0 | 1 |
| 0.4.5 | 1 | 6.5 | 2.5% | 0 | 1 |