GCVE - cpe:2.3:a:teamwire:teamwire:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:teamwire:teamwire:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Teamwire (`749e8ee2-4f08-51e4-9e01-96de6f7c3100`)
Product	Teamwire (`b4de61f5-1010-56c9-abd2-8fe6d0c87249`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/teamwire/platform`	purl2cpe	2026-06-01 10:16:43.732600

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-24278`	vulnerable	2026-06-08 06:29:41.209395	Details available An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the message function. Published: 2024-03-05T00:00:00.000Z Updated: 2024-08-27T20:20:08.323Z Open on db.gcve.eu Reference links https://research.hisolutions.com/2020/08/web-vulnerabilities-are-coming-to-the-desktop-again-rces-and-other-vulnerabilities-in-teamwire/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-24276`	vulnerable	2026-06-08 06:29:41.209036	Details available Cross Site Scripting (XSS) vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the chat name, message preview, username and group name components. Published: 2024-03-05T00:00:00.000Z Updated: 2025-03-27T20:21:12.802Z Open on db.gcve.eu Reference links https://research.hisolutions.com/2020/08/web-vulnerabilities-are-coming-to-the-desktop-again-rces-and-other-vulnerabilities-in-teamwire/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-24275`	vulnerable	2026-06-08 06:29:41.208402	Details available Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function. Published: 2024-03-05T00:00:00.000Z Updated: 2025-03-27T20:16:47.135Z Open on db.gcve.eu Reference links https://research.hisolutions.com/2020/08/web-vulnerabilities-are-coming-to-the-desktop-again-rces-and-other-vulnerabilities-in-teamwire/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17560`	vulnerable	2026-06-08 05:11:06.477392	Details available The admin interface of the Grouptime Teamwire Client 1.5.1 prior to 1.9.0 on-premises messenger server allows stored XSS. All backend versions prior to prod-2018-11-13-15-00-42 are affected. Published: 2019-06-28T17:46:02.000Z Updated: 2024-08-05T10:54:10.174Z Open on db.gcve.eu Reference links https://research.hisolutions.com/2019/06/web-vulnerabilities-are-coming-to-the-desktop-template-injections-lead-to-rce-in-teamwire/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17170`	vulnerable	2026-06-08 05:11:06.059799	Details available Grouptime Teamwire Desktop Client 1.5.1 prior to 1.9.0 on Windows allows code injection via a template, leading to remote code execution. All backend versions prior to prod-2018-11-13-15-00-42 are affected. Published: 2019-06-28T17:46:07.000Z Updated: 2024-08-05T10:39:59.593Z Open on db.gcve.eu Reference links https://research.hisolutions.com/2019/06/web-vulnerabilities-are-coming-to-the-desktop-template-injections-lead-to-rce-in-teamwire/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Teamwire

Notes

PURL mappings

Vulnerability references

Contribute