Known vulnerabilities in XAMPP

Software: XAMPP
Software CPE: cpe:2.3:a:apachefriends.org:xampp:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting XAMPP XAMPP is affected by 5 known vulnerabilities: 1 high, 1 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49085 - Permissions, Privileges, and Access Controls
CVE-2020-11107
CWE-264 Medium
Available
No
7.2.29, 7.3.16, 7.4.4 02.04.2020 SB20200405166
#VU35736 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8920
CWE-79 Low
No
No
- 09.07.2019 SB2019070922
#VU18576 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-8923
CWE-89 High
Available
No
5.6.11 22.05.2019 SB2019051414
#VU18575 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8924
CWE-79 Low
Available
No
5.6.11 22.05.2019 SB2019051706
#VU41274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-2586
CWE-79 Low
Available
No
- 30.09.2014 SB2014093012