wireapp

Records32All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

wireapp records in CISA KEV

No wireapp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wire 13 records MEDIUM Wire-webapp 7 records MEDIUM Wire-server 3 records HIGH Wire Server 3 records MEDIUM Audio, Video, And Signaling 1 record MEDIUM Restund 1 record MEDIUM Wire-audio Video Signaling 1 record MEDIUM Wire-ios-transport 1 record LOW

Records

7 records in Wire-webapp · all components

TI-2022-08612 CVE-2022-24799

Cross Site Scripting in Wire Webapp

MEDIUM 45

wire-webapp is the web application interface for the wire messaging service.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00996 Published 2022-04-20 Fixed in 2022-03-30-production.0 CWE-79

TI-2022-11712 CVE-2022-29168

Cross Site Scripting in Wire Messages

MEDIUM 44

Wire is a secure messaging application.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00857 Published 2022-06-25 Fixed in 022-05-04-production.0, 2022-05-04-production.0-v0.29.7-0-a6f2ded CWE-79

TI-2021-12351 CVE-2021-32683

XSS through createObjectURL

MEDIUM 40

wire-webapp is the web version of Wire, an open-source messenger.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00826 Published 2021-06-15 Fixed in 2021-06-01-production.0 CWE-79

TI-2021-04498 CVE-2021-21400

Entering code in App Lock modal sends input to conversation

LOW 34

wire-webapp is an open-source front end for Wire, a secure collaboration platform.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0124 Published 2021-04-02 Fixed in 2021-03-15-production.0 CWE-200

TI-2022-18754 CVE-2022-39380

wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering

LOW 31

Wire web-app is part of Wire communications.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0064 Published 2023-01-27 Fixed in 2022-11-02 CWE-755

TI-2025-30437 CVE-2025-48066

wire-webapp has no database deletion on client logout

LOW 28

wire-webapp is the web application for the open-source messaging service Wire.

CVSS 3.1MEDIUM 6.0 Local Low privileges User interaction EPSS 0.00106 Published 2025-05-22 Fixed in 2025-05-14-production.0 CWE-226

TI-2022-07658 CVE-2022-23605

Expired Ephemeral Messages not reliably removed in wire-webapp

LOW 20

Wire webapp is a web client for the wire messaging protocol.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00307 Published 2022-02-04 Fixed in 2022-01-27-production.0 CWE-212

Open these records in search →