n/a Rocket.Chat

Name: n/a Rocket.Chat
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical5high20medium0low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-22886US	medium6.1	1.88% (79th)	—	no fix	2021-03-26	≤ Fixed in 3.11, 3.10.5, 3.9.7, 3.8.8
CVE-2022-35248US	high8.8	1.40% (72nd)	—	no fix	2022-09-23	≤ Fixed in versions 4.7.5, 4.8.2, 5.0.0>
CVE-2022-32211US	high8.8	1.36% (72nd)	—	no fix	2022-09-23	≤ Fixed in 3.18.6, 4.4.4 and 4.7.3>
CVE-2023-23917US	high8.8	0.98% (62nd)	—	no fix	2023-02-23	≤ Fixed Version => 5.2.0
CVE-2022-32220US	medium6.5OT elevated	0.95% (61st)	—	no fix	2022-09-23	≤ fixed in 5.0.0>
CVE-2022-32219US	medium4.3	0.86% (58th)	—	no fix	2022-09-23	≤ fixed in 4.7.5>
CVE-2022-35250US	medium4.3	0.85% (58th)	—	no fix	2022-09-23	≤ Fixed in 5.0>
CVE-2022-32229US	medium4.3	0.84% (58th)	—	no fix	2022-09-23	≤ Fixed in version 5.0>
CVE-2022-32228US	medium4.3	0.84% (58th)	—	no fix	2022-09-23	≤ Fixed in versions 4.7.5, 4.8.2 and 5.0.0
CVE-2022-32218US	medium4.3	0.83% (57th)	—	no fix	2022-09-23	≤ Fixed in 4.7.5, 4.8.2 and 5.0>
CVE-2022-32226US	medium4.3	0.78% (56th)	—	no fix	2022-09-23	≤ Fixed in 4.7.5, 4.8.2 and 5.0.0
CVE-2022-35249US	medium4.3OT elevated	0.75% (55th)	—	no fix	2022-09-23	≤ Fixed in version 5.0>
CVE-2022-35246US	medium4.3	0.74% (54th)	—	no fix	2022-09-23	≤ Fixed in versions 4.7.5, 4.8.2 and 5.0>
CVE-2023-28316US	critical9.8	0.72% (54th)	—	no fix	2023-05-09	≤ Fixed in 6.0> and back-ported accordingly to our supported versions. Check https://docs.rocket.chat/resources/get-support/enterprise-support#rocket.chat-versions for more info
CVE-2023-28356US	high7.5	0.72% (54th)	—	no fix	2023-05-11	≤ This issue has been fixed in version 6.0> and is backported for the supported versions. Check this document for more info: https://docs.rocket.chat/resources/get-support/enterprise-support#rocket.chat-versions
CVE-2022-32217US	medium5.3OT elevated	0.68% (52nd)	—	no fix	2022-09-23	≤ fixed in 4.6.4>
CVE-2022-35247US	medium4.3OT elevated	0.66% (51st)	—	no fix	2022-09-23	≤ Fixed in versions 4.7.5, 4.8,2 and 5.0.0>
CVE-2022-32227US	medium6.5OT elevated	0.66% (51st)	—	no fix	2022-09-23	≤ Fixed in versions 4.7.5, 4.8.2, 5.0.0
CVE-2022-35251US	medium5.4	0.64% (51st)	—	no fix	2022-09-23	≤ Fixed in 5.0>
CVE-2023-28359US	medium5.3	0.61% (49th)	—	no fix	2023-05-11	≤ This issue has been fixed in version 6.0> and is backported for the supported versions. Check this document for more info: https://docs.rocket.chat/resources/get-support/enterprise-support#rocket.chat-versions
CVE-2023-28357US	medium4.3OT elevated	0.41% (35th)	—	no fix	2023-05-11	≤ This issue has been fixed in version 6.0> and is backported for the supported versions. Check this document for more info: https://docs.rocket.chat/resources/get-support/enterprise-support#rocket.chat-versions
CVE-2023-28325US	medium6.5OT elevated	0.39% (33rd)	—	no fix	2023-05-11	≤ This issue has been fixed in version 6.0> and is backported for the supported versions. Check this document for more info: https://docs.rocket.chat/resources/get-support/enterprise-support#rocket.chat-versions
CVE-2023-28358US	medium6.1	0.39% (33rd)	—	no fix	2023-05-11	≤ This issue has been fixed in version 6.0> and is backported for the supported versions. Check this document for more info: https://docs.rocket.chat/resources/get-support/enterprise-support#rocket.chat-versions
CVE-2023-28318US	medium5.3	0.26% (18th)	—	no fix	2023-05-09	≤ This issue has been fixed in version 6.0> and is backported for the supported versions. Check this document for more info: https://docs.rocket.chat/resources/get-support/enterprise-support#rocket.chat-versions
CVE-2023-23911US	high7.5	0.25% (17th)	—	no fix	2023-03-10	≤ fixed version => 6.0
CVE-2023-28317US	medium5.3OT elevated	0.23% (14th)	—	no fix	2023-05-09	≤ This issue has been fixed in version 6.0> and is backported for the supported versions. Check this document for more info: https://docs.rocket.chat/resources/get-support/enterprise-support#rocket.chat-versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-285Improper Authorization3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-862Missing Authorization3 CVEs
CWE-284Improper Access Control2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-863Incorrect Authorization2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan