Skip to content
OpenAdvisories

Vendor

Hiawatha

3 known vulnerabilities.

Products

Hiawatha Web server 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.0
    CVE-2025-57784

    Tomahawk authentication timing attack due to usage of 'strcmp'

    Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the management client.

    Hiawatha Hiawatha Web server
  • Medium 6.5
    CVE-2025-57785

    Double free in XSLT in 'show_index'

    A Double Free in XSLT `show_index` has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to corrupt data which may lead to arbitrary code execution.

    Hiawatha Hiawatha Web server
  • Medium 5.3
    CVE-2025-57783

    Improper header parsing may lead to request smuggling

    Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to access restricted resources managed by Hiawatha webserver.

    Hiawatha Hiawatha Web server