Known vulnerabilities in Ampache

Software: Ampache
Software CPE: cpe:2.3:a:ampache.org:ampache:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ampache Ampache is affected by 13 known vulnerabilities: 13 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100219 - Cross-Site Request Forgery (CSRF)
CVE-2024-51487
CWE-352 Low
No
No
7.0.1 11.11.2024 SB2024111116
#VU100216 - Cross-Site Request Forgery (CSRF)
CVE-2024-51484
CWE-352 Low
No
No
7.0.1 11.11.2024 SB2024111116
#VU100215 - Cross-Site Request Forgery (CSRF)
CVE-2024-51485
CWE-352 Low
No
No
7.0.1 11.11.2024 SB2024111116
#VU100214 - Cross-Site Request Forgery (CSRF)
CVE-2024-51488
CWE-352 Low
No
No
7.0.1 11.11.2024 SB2024111116
#VU100212 - Cross-Site Request Forgery (CSRF)
CVE-2024-51489
CWE-352 Low
No
No
7.0.1 11.11.2024 SB2024111116
#VU100211 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-51486
CWE-79 Low
No
No
7.0.1 11.11.2024 SB2024111116
#VU100209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-51490
CWE-79 Low
No
No
7.0.1 11.11.2024 SB2024111116
#VU98303 - Cross-Site Request Forgery (CSRF)
CVE-2024-47828
CWE-352 Low
No
No
6.6.1 09.10.2024 SB2024100958
#VU97964 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47184
CWE-79 Low
No
No
6.6.0 02.10.2024 SB2024100259
#VU95143 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41665
CWE-79 Low
No
No
6.6.0 01.08.2024 SB2024080139
#VU94737 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
6.6.0 25.07.2024 SB2024072518
#VU87771 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
6.3.1 25.03.2024 SB2024032520
#VU54352 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32644
CWE-79 Low
Available
No
4.4.3 24.06.2021 SB2021062406