e
etherpad
Security Risk Profile
77
/100
highSecurity Risk Score
Comprehensive risk assessment based on 21 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 7, 2017 to present
21
Total CVEs
17
Critical+High
0
Exploited
12
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
12
Critical/High
Risk Level
77/100
high
🆕 2Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
6High
11Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
4
2
Input Validation
3
3
Path Traversal
3
4
Infoleak
2
5
SQL Injection
1
Most Affected Products
1. Etherpad Etherpad47
2. Etherpad Etherpad Lite2
3. Etherpad UeberDB1
4. npm/ep_etherpad-lite1
Recent Vulnerabilities
See more →CVE-2026-55085
CVSS 9.6critical
Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite
Aug 19, 2026🔧 No Patch
CVE-2026-55089
CVSS 9.9critical
Etherpad: JWT `admin` claim presence-only check lets non-admin OAuth users invoke every Etherpad HTTP API endpoint
Aug 19, 2026🔧 No Patch
CVE-2021-43802
CVSS 9.9critical
Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports
Dec 9, 2021
CVE-2021-34816
CVSS 7.2high
Jul 21, 2021🔧 No Patch
CVE-2021-34817
CVSS 6.1medium
Jul 19, 2021
CVE-2020-22781
CVSS 7.5high
Apr 28, 2021🔧 No Patch
CVE-2020-22782
CVSS 7.5high
Apr 28, 2021🔧 No Patch
CVE-2020-22783
CVSS 6.5medium
Apr 28, 2021
CVE-2020-22784
CVSS 7.5high
Apr 28, 2021
CVE-2020-22785
CVSS 7.5high
Apr 28, 2021🔧 No Patch
Monitor etherpad in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.