JetBrains Hub

Name: JetBrains Hub
Brand: JetBrains

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

4critical4high6medium2low

updated 2026-10-27

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-25262US	critical9.8OT high	1.44% (73rd)	Exploit	no fix	2022-02-25	≤ 2022.1.14434
CVE-2022-48429US	medium5.4	0.60% (49th)	Exploit	2022.3.15573, 2022.2.15572, 2022.1.15583	2023-03-27	0 → 2022.3.15573, 2022.2.15572, 2022.1.15583
CVE-2026-56142US	high8.8	0.62% (50th)	—	2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429	2026-06-19	7 versions
CVE-2026-50242US	critical9.8OT elevated	0.61% (49th)	—	2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429	2026-06-19	7 versions
CVE-2022-34894US	medium5.3	0.59% (48th)	—	2022.2.14799	2022-07-01	2022.2.14799 → 2022.2.14799
CVE-2022-45471US	high7.5	0.56% (47th)	—	2022.3.15181	2022-11-18	0 → 2022.3.15181
CVE-2026-56141US	—	0.52% (44th)	—	2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429	2026-06-19	7 versions
CVE-2022-29811US	medium4.8	0.48% (42nd)	—	2022.1.14638	2022-04-28	2022.1.14638 → 2022.1.14638
CVE-2022-48477US	critical9.8	0.48% (41st)	—	2023.1.15725	2023-04-24	0 → 2023.1.15725
CVE-2026-25848US	critical9.8OT elevated	0.47% (41st)	—	2025.3.119807	2026-02-09	0 → 2025.3.119807
CVE-2025-24456US	high8.8OT elevated	0.29% (21st)	—	2024.3.55417	2025-01-21	2 versions
CVE-2024-38507US	medium5.4	0.24% (15th)	—	2024.2.34646	2024-06-18	2 versions
CVE-2024-50573US	medium5.4OT elevated	0.22% (13th)	—	2024.3.47707	2024-10-28	2 versions
CVE-2025-64683US	high7.5	0.22% (12th)	—	2025.3.104432	2025-11-10	2 versions
CVE-2025-64681US	low3.7OT elevated	0.20% (10th)	—	2025.3.104992	2025-11-10	2 versions
CVE-2026-32229US	medium6.8	0.18% (7th)	—	2025.3.128064	2026-03-11	2 versions
CVE-2025-64682US	low3.7	0.17% (6th)	—	2025.3.104432	2025-11-10	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-306Missing Authentication for Critical Function3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs
CWE-862Missing Authorization2 CVEs
CWE-284Improper Access Control1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel1 CVEs
CWE-290Authentication Bypass by Spoofing1 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)16 CVEs
RUBDU (FSTEC Data Security Threats Database)11 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan