hallowelt records

15 published records for vendor hallowelt.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

15 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
24Monitor	CVE-2022-2511No exploit	Potential XSS in title URL parameterhallowelt · bluespice · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Jul 22, 2022
24Monitor	CVE-2022-2510No exploit	Potential XSS on Special:SearchCenterhallowelt · bluespice · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Jul 22, 2022
24Monitor	CVE-2022-3895No exploit	Potential XSS in common user interface component libraryhallowelt · bluespice · CWE-79 Pre-auth XSS	Medium6.1	—	0.2%	Nov 15, 2022
23Monitor	CVE-2025-46703No exploit	Potential XSS in Extension:AtMentionshallowelt · bluespice · CWE-116 XSS	Medium5.9	—	0.1%	Sep 19, 2025
23Monitor	CVE-2025-48007No exploit	Potential XSS in Extension:BlueSpiceAvatarshallowelt · bluespice · CWE-116 XSS	Medium5.9	—	0.1%	Sep 19, 2025
23Monitor	CVE-2025-57880No exploit	Potential XSS in Extension:BlueSpiceWhoIsOnlinehallowelt · bluespice · CWE-116 XSS	Medium5.9	—	0.1%	Sep 19, 2025
23Monitor	CVE-2025-58114No exploit	Potential XSS in Extension:CognitiveProcessDesignerhallowelt · bluespice · CWE-20 XSS	Medium5.9	—	0.1%	Sep 19, 2025
21Monitor	CVE-2023-42431No exploit	Potential XSS on user preferences pagehallowelt · bluespice · CWE-20 XSS	Medium5.4	—	0.3%	Oct 30, 2023
21Monitor	CVE-2022-42000No exploit	Potential XSS in comment sectionhallowelt · bluespice · CWE-79 XSS	Medium5.4	—	0.2%	Nov 15, 2022
21Monitor	CVE-2022-42001No exploit	Potential XSS in book navigationhallowelt · bluespice · CWE-79 XSS	Medium5.4	—	0.2%	Nov 15, 2022
21Monitor	CVE-2022-41789No exploit	Potential XSS on default page headerhallowelt · bluespice · CWE-79 XSS	Medium5.4	—	0.2%	Nov 15, 2022
21Monitor	CVE-2022-41814No exploit	Potential XSS in history viewhallowelt · bluespice · CWE-79 XSS	Medium5.4	—	0.2%	Nov 15, 2022
21Monitor	CVE-2022-3958No exploit	Potential XSS on personal menu navigationhallowelt · bluespice · CWE-79 XSS	Medium5.4	—	0.2%	Nov 15, 2022
19Monitor	CVE-2022-3893No exploit	Potential XSS on custom menu navigationhallowelt · bluespice · CWE-79 XSS	Medium4.8	—	0.2%	Nov 15, 2022
19Monitor	CVE-2022-41611No exploit	Potential XSS on sidebar navigationhallowelt · bluespice · CWE-79 XSS	Medium4.8	—	0.2%	Nov 15, 2022

CVE-2022-2511
24Monitor
Potential XSS in title URL parameter
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
hallowelt · bluespiceJul 22, 2022
CVE-2022-2510
24Monitor
Potential XSS on Special:SearchCenter
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
hallowelt · bluespiceJul 22, 2022
CVE-2022-3895
24Monitor
Potential XSS in common user interface component library
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
hallowelt · bluespiceNov 15, 2022
CVE-2025-46703
23Monitor
Potential XSS in Extension:AtMentions
MediumCVSS 5.9No exploitEPSS 0%
- XSS
hallowelt · bluespiceSep 19, 2025
CVE-2025-48007
23Monitor
Potential XSS in Extension:BlueSpiceAvatars
MediumCVSS 5.9No exploitEPSS 0%
- XSS
hallowelt · bluespiceSep 19, 2025
CVE-2025-57880
23Monitor
Potential XSS in Extension:BlueSpiceWhoIsOnline
MediumCVSS 5.9No exploitEPSS 0%
- XSS
hallowelt · bluespiceSep 19, 2025
CVE-2025-58114
23Monitor
Potential XSS in Extension:CognitiveProcessDesigner
MediumCVSS 5.9No exploitEPSS 0%
- XSS
hallowelt · bluespiceSep 19, 2025
CVE-2023-42431
21Monitor
Potential XSS on user preferences page
MediumCVSS 5.4No exploitEPSS 0%
- XSS
hallowelt · bluespiceOct 30, 2023
CVE-2022-42000
21Monitor
Potential XSS in comment section
MediumCVSS 5.4No exploitEPSS 0%
- XSS
hallowelt · bluespiceNov 15, 2022
CVE-2022-42001
21Monitor
Potential XSS in book navigation
MediumCVSS 5.4No exploitEPSS 0%
- XSS
hallowelt · bluespiceNov 15, 2022
CVE-2022-41789
21Monitor
Potential XSS on default page header
MediumCVSS 5.4No exploitEPSS 0%
- XSS
hallowelt · bluespiceNov 15, 2022
CVE-2022-41814
21Monitor
Potential XSS in history view
MediumCVSS 5.4No exploitEPSS 0%
- XSS
hallowelt · bluespiceNov 15, 2022
CVE-2022-3958
21Monitor
Potential XSS on personal menu navigation
MediumCVSS 5.4No exploitEPSS 0%
- XSS
hallowelt · bluespiceNov 15, 2022
CVE-2022-3893
19Monitor
Potential XSS on custom menu navigation
MediumCVSS 4.8No exploitEPSS 0%
- XSS
hallowelt · bluespiceNov 15, 2022
CVE-2022-41611
19Monitor
Potential XSS on sidebar navigation
MediumCVSS 4.8No exploitEPSS 0%
- XSS
hallowelt · bluespiceNov 15, 2022