Product by Countly

    Countly-server

    7 known vulnerabilities in Countly-server (Countly), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Countly-server (Countly)
    CriticalCVE-2026-44977

    Countly-server: Cross-site Scripting

    		9.0
    HighCVE-2022-29174

    Predictable password reset token may lead to account takeover in countly-server

    		8.1
    HighCVE-2026-42270

    countly-server: Unauthenticated Denial of Service (DoS) via Unhandled Stream Exception

    		7.5
    HighCVE-2026-42269

    Countly-server: Path Traversal

    		8.1
    HighCVE-2026-41582

    Countly-server: Path Traversal

    		7.5
    HighCVE-2026-87803

    Countly-server: Incorrect Authorization

    also in 10 other products

    		7.1
    CriticalCVE-2021-32852

    countly-server vulnerable to Cross-site Scripting

    		5.4

    All products by Countly