Known vulnerabilities in drupal7 (Ubuntu package)

Vendor: Canonical Ltd.
Software: drupal7 (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:drupal7_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 5
Public exploits: 4
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting drupal7 (Ubuntu package) drupal7 (Ubuntu package) is affected by 5 known vulnerabilities: 3 high, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48668 - Improper input validation
CVE-2020-28949		 CWE-20 High
Available
Exploited
 Ubuntu Pro 19.11.2020 SB2020112607
SB2020112608
SB2020112609
and 20 more
#VU48669 - Deserialization of Untrusted Data
CVE-2020-28948		 CWE-502 High
Available
No
 Ubuntu Pro 19.11.2020 SB2020112607
SB2020112608
SB2020112609
and 21 more
#VU48540 - Unrestricted Upload of File with Dangerous Type
CVE-2020-13671		 CWE-434 High
No
Exploited
 Ubuntu Pro 18.11.2020 SB2020111827
SB2020111904
SB2020112325
and 4 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 7.26-1ubuntu0.1+esm3, 7.44-1ubuntu1~16.04.0+esm3 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 7.26-1ubuntu0.1+esm3, 7.44-1ubuntu1~16.04.0+esm3 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more