CVE security advisories and vulnerability history for rocket.chat by Rocket.Chat.
77
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
23
Public exploits
PoC or exploit code
6.7
Avg CVSS
2017–2026
Last updated
Overview
rocket.chat has 77 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 23 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.
This page aggregates every publicly disclosed vulnerability (CVE) affecting rocket.chat, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of rocket.chat's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical13
High18
Medium44
Low2
In CISA’s Known Exploited Vulnerabilities catalog
0
None of rocket.chat's CVEs are currently listed in CISA's KEV catalog.
Public exploits
23
23 of rocket.chat's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every rocket.chat version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about rocket.chat vulnerabilities.
How many CVEs does Rocket.Chat rocket.chat have?
Rocket.Chat rocket.chat has 77 published CVE records since 2017.
How many Rocket.Chat rocket.chat CVEs are in CISA KEV?
None of Rocket.Chat rocket.chat's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Rocket.Chat rocket.chat vulnerabilities?
Yes — 23 of Rocket.Chat rocket.chat's CVEs have a known public exploit.
Which versions of Rocket.Chat rocket.chat are affected?
926 distinct Rocket.Chat rocket.chat versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Rocket.Chat rocket.chat CVEs?
Rocket.Chat rocket.chat's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-287 (Improper Authentication), CWE-284 (Improper Access Control).
How many critical Rocket.Chat rocket.chat vulnerabilities are there?
Rocket.Chat rocket.chat has 13 critical and 18 high-severity CVEs.
What is the average severity of Rocket.Chat rocket.chat CVEs?
The average CVSS base score across Rocket.Chat rocket.chat's scored CVEs is 6.7.
RadicalNotion.AI