Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Hallo Welt! GmbH — Vulnerabilities & Security Advisories 18

Browse all 18 CVE security advisories affecting Hallo Welt! GmbH. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Hallo Welt! GmbH develops enterprise software solutions with a core focus on web-based collaboration tools. The organization has 16 CVEs on record, historically vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws. Their products often contain insufficient input validation and improper access controls, leading to consistent security findings. While no major public breaches have been documented, their vulnerability patterns suggest systemic issues in secure coding practices. The company's security posture remains reactive, with patches typically released only after vulnerabilities are disclosed. Their codebase continues to exhibit similar weaknesses across multiple product lines, indicating a need for improved security development lifecycle integration.

Top products by Hallo Welt! GmbH: BlueSpice Common User Interface Component
CVE ID Title CVSS Severity Published
CVE-2026-25784 bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop — BlueSpice CWE-1188 9.8 Critical 2026-10-23
CVE-2026-25716 BlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking users — BlueSpice CWE-862 7.1 High 2026-10-23
CVE-2026-24732 Improper permission checks in Extension:NSFileRepo — BlueSpice CWE-552 6.5AI Medium AI 2026-03-04
CVE-2025-58114 Potential XSS in Extension:CognitiveProcessDesigner — BlueSpice CWE-20 6.1 - 2025-09-19
CVE-2025-57880 Potential XSS in Extension:BlueSpiceWhoIsOnline — BlueSpice CWE-116 6.1 - 2025-09-19
CVE-2025-48007 Potential XSS in Extension:BlueSpiceAvatars — BlueSpice CWE-116 6.1 - 2025-09-19
CVE-2025-46703 Potential XSS in Extension:AtMentions — BlueSpice CWE-116 6.1 - 2025-09-19
CVE-2023-42431 Potential XSS on user preferences page — BlueSpice CWE-20 2.1 Low 2023-10-30
CVE-2022-42001 Potential XSS in book navigation — BlueSpice CWE-79 3.3 Low 2022-11-15
CVE-2022-42000 Potential XSS in comment section — BlueSpice CWE-79 3.3 Low 2022-11-15
CVE-2022-41814 Potential XSS in history view — BlueSpice CWE-79 3.3 Low 2022-11-15
CVE-2022-41789 Potential XSS on default page header — BlueSpice CWE-79 3.3 Low 2022-11-15
CVE-2022-41611 Potential XSS on sidebar navigation — BlueSpice CWE-79 2.3 Low 2022-11-15
CVE-2022-3958 Potential XSS on personal menu navigation — BlueSpice CWE-79 3.3 Low 2022-11-15
CVE-2022-3895 Potential XSS in common user interface component library — Common User Interface Component CWE-79 4.0 Medium 2022-11-15
CVE-2022-3893 Potential XSS on custom menu navigation — BlueSpice CWE-79 2.3 Low 2022-11-15
CVE-2022-2510 Potential XSS on Special:SearchCenter — BlueSpice CWE-79 4.3 Medium 2022-07-22
CVE-2022-2511 Potential XSS in title URL parameter — BlueSpice CWE-79 4.3 Medium 2022-07-22

This page lists every published CVE security advisory associated with Hallo Welt! GmbH. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.