CVE-2017-7556: Hawt Hawtio

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.

Affected products

• Hawt Hawtio: version 1.5.3 only

Published 2017-08-17. Last modified 2026-06-17.