Skip to content

Product

cbot core vulnerabilities

6 published CVES affecting cbot core, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
6
Critical
3
High
2
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest cbot core CVEs

Newest publication first

  3. CVE-2023-2885 Channel Accessible by Non-Endpoint in CBOT's Chatbot

    Published
    HighCVSS 8.1 EPSS 0.30%

    Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM). This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

  4. CVE-2023-2884 Insecure Randomness in CBOT's Chatbot

    Published
    CriticalCVSS 9.8 EPSS 0.69%

    Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

  5. CVE-2023-2883 IDOR in CBOT's Chatbot

    Published
    HighCVSS 8.8 EPSS 0.68%

    Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

  6. CVE-2023-2882 Privilege Escalation in CBOT's Chatbot

    Published
    CriticalCVSS 9.8 EPSS 0.64%

    Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.