Known vulnerabilities in Mautic Integration

Software CPE: cpe:2.3:a:acquia:mautic:*:*:*:*:*:drupal:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mautic Integration Mautic Integration is affected by 12 known vulnerabilities: 4 medium, 8 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97650 - Missing Authentication for Critical Function
CVE-2022-25770
CWE-306 Low
No
No
4.4.13, 5.1.1 23.09.2024 SB2024092346
#VU97649 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-27917
CWE-79 Low
No
No
4.4.13, 5.1.1 23.09.2024 SB2024092346
#VU97648 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47050
CWE-79 Low
No
No
4.4.13, 5.1.1 23.09.2024 SB2024092346
#VU97646 - Observable Response Discrepancy
CVE-2024-47059
CWE-204 Medium
No
No
5.1.1 23.09.2024 SB2024092346
#VU97645 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47058
CWE-79 Low
No
No
4.4.13, 5.1.1 23.09.2024 SB2024092346
#VU97644 - Improper Access Control
CVE-2022-25768
CWE-284 Medium
No
No
4.4.13, 5.1.1 23.09.2024 SB2024092346
#VU88528 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-27916
CWE-22 Medium
No
No
4.4.12, 5.0.4 15.04.2024 SB2024041525
#VU88527 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-25775
CWE-89 Low
No
No
4.4.12, 5.0.4 15.04.2024 SB2024041525
#VU88526 - Server-Side Request Forgery (SSRF)
CVE-2022-25777
CWE-918 Low
No
No
4.4.12, 5.0.4 15.04.2024 SB2024041525
#VU88525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-25774
CWE-79 Low
No
No
4.4.12, 5.0.4 15.04.2024 SB2024041525
#VU88524 - Exposure of sensitive information to an unauthorized actor
CVE-2022-25776
CWE-200 Medium
No
No
4.4.12, 5.0.4 15.04.2024 SB2024041525
#VU88523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-27915
CWE-79 Low
No
No
4.4.12, 5.0.4 15.04.2024 SB2024041525