Andrew Simpson Webcollab — known CVE vulnerabilities

Every CVE whose affected-product data names Andrew Simpson Webcollab, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2009-1455 — CVSS 6.8 (medium): Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the…
• CVE-2009-1454 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy Goat) allows remote attackers to inject arbitrary…
• CVE-2013-2652 — CVSS 4.3 (medium): CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP…