Vendor
Mattermost
663 known vulnerabilities in products by Mattermost, 0 of them actively exploited (CISA KEV).
Key figures
663
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
26
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2025-25279 | Arbitrary file read in Mattermost Boards via import & export board archive | 9.9 | |
| Critical | CVE-2019-20853 | Mattermost Packages: Remote Code Execution | 9.8 | |
| High | CVE-2021-37859 | Reflected XSS in OAuth Flow | 7.1 | |
| Critical | CVE-2019-20856 | Mattermost: security vulnerability | 9.8 | |
| High | CVE-2019-20861 | Mattermost: Code Execution | 8.8 | |
| Critical | CVE-2017-18912 | Mattermost: security vulnerability | 9.8 | |
| Critical | CVE-2017-18900 | Mattermost: security vulnerability | 9.8 | |
| Critical | CVE-2016-11064 | Mattermost: security vulnerability | 9.8 | |
| Critical | CVE-2017-18920 | Mattermost: security vulnerability | 9.8 | |
| Critical | CVE-2019-20851 | Mattermost: Path Traversal | 9.1 | |
| Critical | CVE-2018-21251 | Mattermost: security vulnerability | 9.8 | |
| Critical | CVE-2017-18915 | Mattermost: security vulnerability | 9.8 | |
| Critical | CVE-2025-4981 | Path Traversal Leading to RCE by Any Authenticated Mattermost User | 9.9 | |
| Critical | CVE-2016-11074 | Mattermost: security vulnerability | 9.8 | |
| Critical | CVE-2017-18908 | Mattermost: security vulnerability | 9.8 | |
| Critical | CVE-2017-18885 | Mattermost: Privilege Escalation | 9.8 | |
| Critical | CVE-2017-18888 | Mattermost: SQL Injection | 9.8 | |
| Critical | CVE-2017-18883 | Mattermost: security vulnerability | 9.1 | |
| High | CVE-2018-21264 | Mattermost: security vulnerability | 8.8 | |
| High | CVE-2019-20854 | Mattermost: Denial of Service | 7.5 | |
| Critical | CVE-2025-20051 | Arbitrary file read via block duplication in Mattermost Boards | 9.9 | |
| High | CVE-2018-21248 | Mattermost: security vulnerability | 7.5 | |
| High | CVE-2017-18886 | Mattermost: security vulnerability | 8.8 | |
| High | CVE-2018-21258 | Mattermost: Denial of Service | 7.5 | |
| High | CVE-2019-20855 | Mattermost: Information Disclosure | 7.5 |
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| Mattermost | 519 | 0 |
| Mattermost | 481 | 0 |
| Mattermost | 45 | 0 |
| Mattermost | 23 | 0 |
| Mattermost Plugins | 17 | 0 |
| Mattermost Confluence Plugin | 14 | 0 |
| Mattermost Confluence Plugin | 14 | 0 |
| Mattermost Boards | 4 | 0 |