Wire Webapp
Vendor:
First CVE: Apr 2, 2021 · Active for 5 years
7
Total CVEs
More Total CVEs than 83% of tracked products
1.8
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
5.4
Avg CVSS
Higher Avg CVSS than 14% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Wire Webapp over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 2, 2021
5 years ago
Most Recent CVE
May 22, 2025
428 days ago
CVE Severity & Scoring
Wire Webapp7 CVEs
14%
86%
All CVEs352,231 CVEs
45%
40%
11%
LowMedium
Attack Vector
Local2 (28.6%)
Network5 (71.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (28.6%)
Unknown0 (0.0%)
Required5 (71.4%)
Privileges Required
Low0 (0.0%)
High1 (14.3%)
None6 (85.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-29168MEDIUM Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering `@mentions` in the wire-webapp. If a | Jun 25, 2022 | 6.1 | 22 | NO | NO |
CVE-2022-24799MEDIUM wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code highlighting” in the wire-webapp resulted in the possibility of | Apr 20, 2022 | 6.1 | 21 | NO | NO |
CVE-2021-21400MEDIUM wire-webapp is an open-source front end for Wire, a secure collaboration platform. In wire-webapp before version 2021-03-15-production.0, when being prompted to enter the app-lock | Apr 2, 2021 | 6.5 | 21 | NO | NO |
CVE-2021-32683MEDIUM wire-webapp is the web version of Wire, an open-source messenger. A cross-site scripting vulnerability exists in wire-webapp prior to version 2021-06-01-production.0. If a user is | Jun 15, 2021 | 6.1 | 20 | NO | NO |
CVE-2022-39380MEDIUM Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Ma | Jan 27, 2023 | 5.3 | 19 | NO | NO |
CVE-2025-48066MEDIUM wire-webapp is the web application for the open-source messaging service Wire. A bug fix caused a regression causing an issue with function to delete local data. Instructing the cl | May 22, 2025 | 5.5 | 17 | NO | NO |
Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat histo | Feb 4, 2022 | 2.3 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Wire Webapp
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2025-05-06 | 1 | 5.5 | 0.1% | 0 | 0 |
| 2025-04-29 | 1 | 5.5 | 0.1% | 0 | 0 |
| 2025-04-14 | 1 | 5.5 | 0.1% | 0 | 0 |
| 2022-04-21 | 1 | 6.1 | 0.8% | 0 | 0 |
| 2022-04-19 | 1 | 6.1 | 0.8% | 0 | 0 |
| 2022-04-13 | 1 | 6.1 | 0.8% | 0 | 0 |
| 2022-03-31 | 1 | 6.1 | 0.8% | 0 | 0 |
| 2022-03-30 | 1 | 6.1 | 0.8% | 0 | 0 |
| 2022-03-29 | 2 | 6.1 | 0.9% | 0 | 0 |
| 2022-03-28 | 2 | 6.1 | 0.9% | 0 | 0 |
| 2022-03-23 | 2 | 6.1 | 0.9% | 0 | 0 |
| 2022-02-22 | 2 | 6.1 | 0.9% | 0 | 0 |
| 2022-02-17 | 2 | 6.1 | 0.9% | 0 | 0 |
| 2022-02-15 | 2 | 6.1 | 0.9% | 0 | 0 |
| 2022-02-08 | 2 | 6.1 | 0.9% | 0 | 0 |
| 2022-02-07 | 2 | 6.1 | 0.9% | 0 | 0 |
| 2022-02-03 | 2 | 6.1 | 0.9% | 0 | 0 |
| 2022-02-02 | 2 | 6.1 | 0.9% | 0 | 0 |
| 2022-01-27 | 2 | 6.1 | 0.9% | 0 | 0 |
| 2022-01-20 | 2 | 6.1 | 0.9% | 0 | 0 |