Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

BlueSpice — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in BlueSpice, with AI-generated Chinese analysis, references, and POCs.

Vendor: Hallo Welt! GmbH

CVE IDTitleCVSSSeverityPublished
CVE-2026-24732 Improper permission checks in Extension:NSFileRepo CWE-552 6.5AIMediumAI2026-03-04
CVE-2025-58114 Potential XSS in Extension:CognitiveProcessDesigner CWE-20 6.1 -2025-09-19
CVE-2025-57880 Potential XSS in Extension:BlueSpiceWhoIsOnline CWE-116 6.1 -2025-09-19
CVE-2025-48007 Potential XSS in Extension:BlueSpiceAvatars CWE-116 6.1 -2025-09-19
CVE-2025-46703 Potential XSS in Extension:AtMentions CWE-116 6.1 -2025-09-19
CVE-2023-42431 Potential XSS on user preferences page CWE-20 2.1 Low2023-10-30
CVE-2022-42000 Potential XSS in comment section CWE-79 3.3 Low2022-11-15
CVE-2022-42001 Potential XSS in book navigation CWE-79 3.3 Low2022-11-15
CVE-2022-3958 Potential XSS on personal menu navigation CWE-79 3.3 Low2022-11-15
CVE-2022-41611 Potential XSS on sidebar navigation CWE-79 2.3 Low2022-11-15
CVE-2022-41789 Potential XSS on default page header CWE-79 3.3 Low2022-11-15
CVE-2022-41814 Potential XSS in history view CWE-79 3.3 Low2022-11-15
CVE-2022-3893 Potential XSS on custom menu navigation CWE-79 2.3 Low2022-11-15
CVE-2022-2510 Potential XSS on Special:SearchCenter CWE-79 4.3 Medium2022-07-22
CVE-2022-2511 Potential XSS in title URL parameter CWE-79 4.3 Medium2022-07-22

All 15 known CVE vulnerabilities affecting BlueSpice with full Chinese analysis, references, and POCs where available.