Advisories · Technology

CBOT Chatbot.

Every CVE that names CBOT Chatbot among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-2887 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

User Authentication Bypass in CBOT's Chatbot
- CBOT Chatbot
- Authentication bypass
Not analysed yet 25 May 2023
CVE-2023-2886 CVE record

CVSS 4.3 Medium

Cross-Site WebSocket Hijacking in CBOT's Chatbot
- CBOT Chatbot
- CWE-1385
Not analysed yet 25 May 2023
CVE-2023-2885 CVE record

CVSS 8.1 High

Channel Accessible by Non-Endpoint in CBOT's Chatbot
- CBOT Chatbot
- CWE-924
Not analysed yet 25 May 2023
CVE-2023-2884 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Insecure Randomness in CBOT's Chatbot
- CBOT Chatbot
- Weak cryptography or TLS
Not analysed yet 25 May 2023
CVE-2023-2883 CVE record

CVSS 8.8 High

IDOR in CBOT's Chatbot
- CBOT Chatbot
- Broken access control
Not analysed yet 25 May 2023
CVE-2023-2882 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Privilege Escalation in CBOT's Chatbot
- CBOT Chatbot
- CWE-1270
Not analysed yet 25 May 2023