Known vulnerabilities in Subversion

Software: Subversion
Software CPE: cpe:2.3:a:apache_foundation:subversion:*:*:*:*:*:*:*:*
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Subversion Subversion is affected by 24 known vulnerabilities: 2 high, 15 medium, 7 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101363 - Improper input validation
CVE-2024-46901
CWE-20 Medium
No
No
1.14.5 09.12.2024 SB2024120959
SB2024121264
SB2024121357
and 6 more
#VU101362 - Improper input validation
CVE-2013-1968
CWE-20 Medium
No
No
1.6.23, 1.7.10 09.12.2024 SB2013073113
#VU98496 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-45720
CWE-78 Medium
No
No
1.14.4 14.10.2024 SB2024101459
SB2024121264
#VU62779 - Resource Management Errors
CVE-2015-0248
CWE-399 Medium
No
No
1.7.20, 1.8.13 04.05.2022 SB2015040802
SB2022050403
#VU62079 - Use After Free
CVE-2022-24070
CWE-416 Medium
No
No
1.10.8, 1.14.2 12.04.2022 SB2022041213
SB2022041263
SB2022041402
and 19 more
#VU62078 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28544
CWE-200 Low
No
No
1.10.8, 1.14.2 12.04.2022 SB2022041213
SB2022041263
SB2022041402
and 10 more
#VU50623 - NULL Pointer Dereference
CVE-2020-17525
CWE-476 Medium
No
No
1.10.7, 1.14.1 11.02.2021 SB2021021119
SB2021021410
SB2021021520
and 9 more
#VU19590 - Improper input validation
CVE-2019-0203
CWE-20 Medium
No
No
1.9.11, 1.10.5, 1.12.1 31.07.2019 SB2019073104
SB2019073107
SB2019080106
and 10 more
#VU19589 - Reachable Assertion
CVE-2018-11782
CWE-617 Medium
No
No
1.9.12, 1.10.6, 1.12.2 31.07.2019 SB2019073104
SB2019073107
SB2019080106
and 12 more
#VU17221 - Improper input validation
CVE-2018-11803
CWE-20 Medium
No
No
1.10.4 25.01.2019 SB2019012512
SB2019012513
SB2019012901
and 4 more
#VU7886 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2017-9800
CWE-78 High
No
No
- 15.08.2017 SB2017081009
SB2017081107
SB2017081604
and 8 more
#VU32289 - Improper input validation
CVE-2016-2168
CWE-20 Medium
No
No
1.8.16 05.05.2016 SB2016050510
SB2016060207
SB2016060213
and 4 more
#VU32288 - Improper Access Control
CVE-2016-2167
CWE-284 Medium
No
No
1.8.16 05.05.2016 SB2016050509
SB2016060206
SB2016060213
and 4 more
#VU32391 - Exposure of sensitive information to an unauthorized actor
CVE-2015-3187
CWE-200 Low
No
No
1.7.21 12.08.2015 SB2015081203
SB2014122304
SB2015092510
#VU32390 - Exposure of sensitive information to an unauthorized actor
CVE-2015-3184
CWE-200 Medium
No
No
1.7.21 12.08.2015 SB2015081202
SB2014122303
SB2015092510
#VU32573 - Improper input validation
CVE-2014-0032
CWE-20 Medium
No
No
1.7.15 14.02.2014 SB2014021403
SB2014030712
SB2014032506
and 1 more
#VU32571 - Permissions, Privileges, and Access Controls
CVE-2013-4505
CWE-264 Low
No
No
1.7.14 07.12.2013 SB2013120706
SB2014030710
SB2013121729
and 1 more
#VU32572 - Improper input validation
CVE-2013-4558
CWE-20 Low
No
No
1.7.14 07.12.2013 SB2013120707
SB2014030711
SB2013121729
and 1 more
#VU32635 - Memory corruption
CVE-2013-4131
CWE-119 Low
No
No
1.7.11 31.07.2013 SB2013073101
SB2013080704
SB2013090402
#VU32680 - Memory corruption
CVE-2013-1845
CWE-119 Low
No
No
1.6.21 02.05.2013 SB2013050201
SB2013050311
SB2013041110


Showing elements 1 - 20 out of 24