Vulnerabilities

TI-2026-58227 CVE-2026-84699 · GHSA-gpww-2qcp-q6c7

Team Password Manager before 14.184.308 Authentication Bypass in Password Reset

MEDIUM 49

Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00629 Published 2026-09-02 Fixed in 14.184.308 CWE-640

TI-2025-19243 CVE-2025-26091 · GHSA-3297-hxj5-867g

A Cross Site Scripting (XSS) vulnerability exists in TeamPasswordManager v12.162.284 and…

MEDIUM 54

A Cross Site Scripting (XSS) vulnerability exists in TeamPasswordManager v12.162.284 and before that could allow a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious pa…

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00306 Published 2025-03-04 No fix listed CWE-79

TI-2021-19787 CVE-2021-44037 · GHSA-fj36-8fj3-c7q3

Team Password Manager (aka TeamPasswordManager) before 10.135.236 allows password-reset poisoning.

LOW 34

Team Password Manager (aka TeamPasswordManager) before 10.135.236 allows password-reset poisoning.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00789 Published 2021-11-19 No fix listed CWE-640

TI-2021-19786 CVE-2021-44036 · GHSA-472p-c53m-9vjx

Team Password Manager (aka TeamPasswordManager) before 10.135.236 has a CSRF vulnerability during import.

LOW 38

Team Password Manager (aka TeamPasswordManager) before 10.135.236 has a CSRF vulnerability during import.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00431 Published 2021-11-19 No fix listed CWE-352

TI-2019-14023 CVE-2019-19461 · GHSA-5pj4-qr48-pr2g

Post-authentication Stored XSS in Team Password Manager through 7.93.204 allows attackers…

LOW 25

Post-authentication Stored XSS in Team Password Manager through 7.93.204 allows attackers to steal other users' credentials by creating a shared password with HTML code as the title.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00541 Published 2020-03-16 No fix listed CWE-79

Vulnerabilities

Filters

Team Password Manager before 14.184.308 Authentication Bypass in Password Reset

A Cross Site Scripting (XSS) vulnerability exists in TeamPasswordManager v12.162.284 and…

Team Password Manager (aka TeamPasswordManager) before 10.135.236 allows password-reset poisoning.

Team Password Manager (aka TeamPasswordManager) before 10.135.236 has a CSRF vulnerability during import.

Post-authentication Stored XSS in Team Password Manager through 7.93.204 allows attackers…