JetBrains

Records788All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical84CVSS 9.0–10.0

CVSS high249CVSS 7.0–8.9

Exploited now

JetBrains records in CISA KEV

TI-2026-45031 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2026-08-05 TI-2024-18054 JetBrains TeamCity Relative Path Traversal Vulnerability CRITICAL 89KEV 2026-04-20 TI-2024-18053 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 100KEV 2024-03-07 TI-2023-22884 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 100KEV 2023-10-04

Components

Products in the NVD configurations · select one to filter the records

Teamcity 283 records CRITICAL Youtrack 157 records MEDIUM Intellij Idea 77 records HIGH Hub 37 records MEDIUM Ktor 21 records MEDIUM Pycharm 12 records HIGH Toolbox 11 records MEDIUM Rider 9 records HIGH

Records

11 records in Toolbox · all components

TI-2020-15448 CVE-2020-25207 · GHSA-59g2-7w59-vv9v

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler.

MEDIUM 49

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04568 Published 2020-11-16 No fix listed

TI-2025-27879 CVE-2025-43012 · GHSA-xxvv-rw24-p2j6

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible

MEDIUM 44

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00631 Published 2025-04-17 Fixed in 2.6 CWE-77

TI-2020-15280 CVE-2020-25013 · GHSA-q292-fcwh-4fmh

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler.

LOW 36

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01384 Published 2020-11-16 No fix listed

TI-2020-12456 CVE-2020-15827 · GHSA-8p4g-mphq-f8x8

In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications…

LOW 34

In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00691 Published 2020-08-08 No fix listed CWE-347

TI-2019-13371 CVE-2019-18368 · GHSA-7ww6-8g9j-pfcj

In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.

LOW 34

In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01041 Published 2019-10-31 No fix listed

TI-2022-24061 CVE-2022-48481 · GHSA-vqwh-mv63-c273

In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible

LOW 33

In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00208 Published 2023-04-28 Fixed in 1.28 CWE-691

TI-2025-27880 CVE-2025-43013 · GHSA-x8cw-f5xw-fwh2

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible

LOW 32

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00155 Published 2025-04-17 Fixed in 2.6 CWE-319

TI-2024-16450 CVE-2024-24943 · GHSA-5fr5-frrw-m97p

In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image

LOW 31

In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00407 Published 2024-02-06 Fixed in 2.2 CWE-400

TI-2025-27881 CVE-2025-43014 · GHSA-7gwg-2mr3-xhpm

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation

LOW 28

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0023 Published 2025-04-17 Fixed in 2.6 CWE-304

TI-2025-27791 CVE-2025-42921 · GHSA-32gj-564x-3982

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin

LOW 28

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.002 Published 2025-04-17 Fixed in 2.6 CWE-297

TI-2019-11157 CVE-2019-14959 · GHSA-xxqp-r9x6-3h94

JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.

LOW 27

JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00656 Published 2019-10-02 No fix listed CWE-319

Open these records in search →

Critical	84
High	249
Medium	403
Low	52
No CVSS	0