SecAlerts
CVE ListPricingSign Up
h

hubspot

Security Risk Profile

39
/100
low

Security Risk Score

Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from June 4, 2018 to present

10
Total CVEs
5
Critical+High
0
Exploited
3
Unpatched

Threat Assessment

Avg CVSS
7.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
39/100
low

Severity Distribution

Critical
3
High
2
Medium
5
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
SSRF
2
2
Infoleak
1
3
Code Injection
1
4
XSS
1

Most Affected Products

1. HubSpot Jinjava5
2. maven/com.hubspot.jinjava:jinjava3
3. HubSpot HubSpot2
4. HubSpot HubSpot WordPress2
5. HubSpot HubSpot All-In-One Marketing – Forms, Popups, Live Chat (WordPress plugin)1

Recent Vulnerabilities

See more →
CVE-2026-9656
CVSS 4.3EPSS 0%medium

HubSpot All-In-One Marketing <= 11.3.62 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor Localized Script

Jul 17, 2026🔧 No Patch
CVE-2026-57736
CVSS 7.4high

WordPress HubSpot plugin <= 11.3.51 - Sensitive Data Exposure vulnerability

Jul 1, 2026🔧 No Patch
CVE-2026-25526
CVSS 9.8EPSS 0%critical

JinJava Bypass through ForTag leads to Arbitrary Java Execution

Feb 3, 2026
CVE-2023-37749
CVSS 5.3medium
Oct 27, 2025🔧 No Patch
CVE-2025-59340
CVSS 10.0critical

jinjava Sandbox Bypass via JavaType-Based Deserialization

Sep 17, 2025
CVE-2024-5879
CVSS 6.4medium

HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 11.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget

Aug 30, 2024
CVE-2022-1239
CVSS 8.8high

HubSpot < 8.8.15 - Contributor+ Blind SSRF

May 2, 2022🔧 No Patch
CVE-2020-12668
CVSS 6.8medium

GHSL-2020-072: Arbitrary file disclosure in JinJava - CVE-2020-12668

Jul 29, 2020
CVE-2018-18893
CVSS 5.3medium
Jan 3, 2019
CVE-2017-16035
CVSS 9.3critical
Jun 4, 2018🔧 No Patch

Monitor hubspot in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
AboutNewsDocumentationTermsContact

© 2026 SecAlerts Pty Ltd. All rights reserved.

hubspot Security Vulnerabilities & Risk Score | 10 CVEs | SecAlerts - SecAlerts