Count

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Count records in CISA KEV

No Count vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Countly Server · all components

TI-2021-12517 CVE-2021-32852 · GHSA-7pfv-9vwr-6hpx

HIGH 72

Countly, a product analytics solution, is vulnerable to cross-site scripting prior to version 21.11 of the community edition.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.0093 Published 2023-02-20 Fixed in 21.11 CWE-79

TI-2022-11718 CVE-2022-29174

MEDIUM 40

countly-server is the server-side part of Countly, a product analytics solution.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01479 Published 2022-05-17 Fixed in 21.11.4, 22.03.7 CWE-640