Known vulnerabilities in Subrion CMS

Vendor: Intelliants
Software: Subrion CMS
Software CPE: cpe:2.3:a:intelliants:subrion:*:*:*:*:*:*:*:*
Website: https://intelliants.com/
Total vulnerabilities: 33
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Subrion CMS Subrion CMS is affected by 33 known vulnerabilities: 3 high, 10 medium, 20 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57421 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-41947		 CWE-89 Low
No
No
 - 18.10.2021 SB2021101810
#VU52366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-23761		 CWE-79 Low
No
No
 - 20.04.2021 SB2021042009
#VU49276 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35437		 CWE-79 Medium
No
No
 - 26.12.2020 SB2021010509
#VU34384 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20389		 CWE-79 Low
No
No
 - 15.05.2020 SB2018080214
#VU34385 - Cross-Site Request Forgery (CSRF)
CVE-2019-20390		 CWE-352 High
No
No
 - 15.05.2020 SB2018080214
#VU27474 - Deserialization of Untrusted Data
CVE-2020-12469		 CWE-502 Medium
No
No
 - 30.04.2020 SB2020043022
#VU27473 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-12468		 CWE-94 Medium
No
No
 - 30.04.2020 SB2020043022
#VU27472 - Session Fixation
CVE-2020-12467		 CWE-384 Medium
No
No
 - 30.04.2020 SB2020043022
#VU21588 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17225		 CWE-79 Low
Available
No
 - 07.10.2019 SB2019050801
#VU19154 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15563		 CWE-79 Low
No
No
 - 11.07.2019 SB2019050801
#VU19153 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-16631		 CWE-79 Low
No
No
 - 11.07.2019 SB2019050801
#VU19152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-16629		 CWE-79 Low
No
No
 - 11.07.2019 SB2019050801
#VU19151 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11406		 CWE-79 Low
No
No
 - 11.07.2019 SB2019050801
#VU18312 - Cross-Site Request Forgery (CSRF)
CVE-2017-18366		 CWE-352 Medium
No
No
 - 18.04.2019 SB2019041510
#VU36393 - Unrestricted Upload of File with Dangerous Type
CVE-2018-19422		 CWE-434 Medium
Available
No
 - 21.11.2018 SB2018080214
#VU36750 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-16327		 CWE-79 Low
No
No
 - 02.09.2018 SB2018080214
#VU36798 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14840		 CWE-79 Low
Available
No
 - 02.08.2018 SB2018080214
#VU36799 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14835		 CWE-79 Low
No
No
 - 02.08.2018 SB2018080214
#VU36800 - Improper Privilege Management
CVE-2018-14836		 CWE-269 Medium
No
No
 - 02.08.2018 SB2018080214
#VU38795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-10795		 CWE-79 Low
No
No
 - 02.07.2017 SB2017070201


Showing elements 1 - 20 out of 33