Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Hallowelt

16 known vulnerabilities

7
MEDIUM
8
LOW

Top Products

bluespice 15 common user interface 1
15 CVEs
4.8
CVE-2025-58114

Improper Input Validation vulnerability in Hallo Welt! GmbH BlueSpice (Extension:CognitiveProcessDesigner) allows Cross-

5.4
CVE-2025-57880

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceWhoIsOnline) all

6.4
CVE-2025-48007

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceAvatars) allows

6.4
CVE-2025-46703

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-

2.1
CVE-2023-42431

Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbi

3.3
CVE-2022-42001

Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account a

3.3
CVE-2022-42000

Cross-site Scripting (XSS) vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permi

3.3
CVE-2022-41814

Cross-site Scripting (XSS) vulnerability in BlueSpiceFoundation extension of BlueSpice allows user with regular account

3.3
CVE-2022-41789

Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permiss

2.3
CVE-2022-41611

Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to in

3.3
CVE-2022-3958

Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account

4.0
CVE-2022-3895

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output

2.3
CVE-2022-3893

Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permission

4.3
CVE-2022-2511

Cross-site Scripting (XSS) vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to injec

4.3
CVE-2022-2510

Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to

Frequently Asked Questions

How many CVEs affect Hallowelt?

Hallowelt has 16 CVE records in our database, including 0 critical and 0 high severity vulnerabilities.

What are the most severe Hallowelt vulnerabilities?

Hallowelt has 0 critical severity (CVSS 9.0+) and 0 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.

How can I scan for Hallowelt vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Hallowelt products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Hallowelt Vulnerabilities

CyberStrike scans your infrastructure for Hallowelt vulnerabilities and provides real-time remediation guidance.

Get Started