Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Ericsson Component: Codechecker Clear all filters
TI-2026-20759 CVE-2026-25660 · GHSA-4v9x-cqc5-j645

Authentication bypass for certain API calls

Priority MEDIUM 48

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00447 Published 2026-04-24 No fix listed CWE-290
TI-2025-27277 CVE-2025-40843 · GHSA-5xf2-f6ch-6p8r

Buffer overflow in CodeChecker log command

Priority HIGH 67

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2025-10-28 Fixed in 6.26.2 CWE-121
TI-2025-01113 CVE-2025-1300 · GHSA-g839-x3p3-g5fm

Open redirect in CodeChecker web server

Priority LOW 27

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00266 Published 2025-02-28 Fixed in 6.24.6 CWE-601
TI-2024-36027 CVE-2024-53829 · GHSA-f8c8-4pm7-w885

Cross-Site Request Forgery in CodeChecker API

Priority HIGH 69

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00259 Published 2025-01-21 Fixed in 6.24.5 CWE-352
TI-2024-09345 CVE-2024-10082 · GHSA-fpm5-2wcj-vfr7

Authentication bypass in Ericsson CodeChecker

Priority MEDIUM 41

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00479 Published 2024-11-06 Fixed in 6.24.2 CWE-305
TI-2024-09344 CVE-2024-10081 · GHSA-f3f8-vx3w-hp5q

Authentication bypass in Ericsson CodeChecker

Priority HIGH 76

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.3992 Published 2024-11-06 Fixed in 6.24.2 CWE-288
TI-2021-19910 CVE-2021-44217 · GHSA-fxmx-pfm2-85m2

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability…

Priority LOW 31

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON d…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01647 Published 2022-01-18 Fixed in 6.18.2 CWE-79