rocket.chat Vulnerabilities

• CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')16 CVEs
• CWE-200Exposure of Sensitive Information to an Unauthorized Actor10 CVEs
• CWE-287Improper Authentication7 CVEs
• CWE-284Improper Access Control6 CVEs
• CWE-862Missing Authorization5 CVEs

How many CVEs does Rocket.Chat rocket.chat have?

Rocket.Chat rocket.chat has 84 published CVE records since 2017.

How many Rocket.Chat rocket.chat CVEs are in CISA KEV?

None of Rocket.Chat rocket.chat's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Rocket.Chat rocket.chat vulnerabilities?

Yes — 34 of Rocket.Chat rocket.chat's CVEs have a known public exploit.

Which versions of Rocket.Chat rocket.chat are affected?

1,024 distinct Rocket.Chat rocket.chat versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Rocket.Chat rocket.chat CVEs?

Rocket.Chat rocket.chat's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-287 (Improper Authentication), CWE-284 (Improper Access Control).

How many critical Rocket.Chat rocket.chat vulnerabilities are there?

Rocket.Chat rocket.chat has 14 critical and 20 high-severity CVEs.

What is the average severity of Rocket.Chat rocket.chat CVEs?

The average CVSS base score across Rocket.Chat rocket.chat's scored CVEs is 6.7.

• All Rocket.Chat vulnerabilities
• The MITRE CVE Program (opens in a new tab)
• Learn: What is a CVE?
• CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.