clickstudios passwordstate

Name: clickstudios passwordstate
Brand: clickstudios

productUS

cpe:2.3:a:clickstudios:passwordstate:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical2high10medium1low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-26061US	high7.5OT elevated	5.12% (92nd)	Exploit	8.5	2020-10-05	< 8.5
CVE-2022-4611US	medium5.3OT elevated	1.31% (70th)	Exploit	9.5	2022-12-19	3 versions
CVE-2020-27747US	medium6.8	1.12% (66th)	Exploit	no fix	2020-10-29	= 8.9
CVE-2022-3875US	high7.5	1.04% (64th)	—	no fix	2022-12-19	—
CVE-2022-4612US	medium6.5	0.91% (60th)	—	9.5	2022-12-19	3 versions
CVE-2022-3876US	medium6.5	0.91% (60th)	—	no fix	2022-12-19	—
CVE-2022-25570US	medium6.5OT elevated	0.82% (57th)	—	no fix	2022-03-21	= 9.4
CVE-2022-4613US	medium6.5	0.78% (56th)	—	9.5	2022-12-19	3 versions
CVE-2022-3877US	medium5.4	0.68% (52nd)	—	no fix	2022-12-19	—
CVE-2018-14776US	medium5.4	0.53% (44th)	—	no fix	2018-08-01	≤ 8.3
CVE-2023-47801US	medium4.7	0.44% (38th)	—	9.8	2023-11-13	< 9.8
CVE-2022-4610US	medium5.5OT elevated	0.24% (16th)	—	9.5	2022-12-19	3 versions
CVE-2023-43295US	low3.5	0.24% (15th)	—	no fix	2023-10-31	= 9.7

The flaw types (CWEs) most of these CVEs share.

CWE-266Incorrect Privilege Assignment2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-302Authentication Bypass by Assumed-Immutable Data1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-310CWE-3101 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.