Known vulnerabilities in redmine (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
redmine (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:redmine_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
6.0.3+ds-1
6.0.3+ds-2
6.0.4+ds-1
6.0.4+ds-2
6.0.4+ds-3
6.0.5+ds-1
5.1.3+ds-6
5.1.3+ds-5
5.1.3+ds-4
5.1.3+ds-3
5.1.3+ds-2
5.1.3+ds-1
5.0.4-7
5.0.4-6
5.0.4-5
5.0.4-4
5.0.4-3
5.0.4-2
5.0.4-1
5.0.2-1
5.0.2-2
5.0.0-1
4.0.7
4.0.6
4.0.4
3.4.4
3.2.1
2.4.2
1.3.2+dfsg1
1.3.2+dfsg1-1ubuntu1
4.0.7-1
4.0.6-2
4.0.6-1
4.0.1-2ubuntu0.1
3.4.4-1ubuntu0.1
4.0.4-2
4.0.4-3
3.2.1-2ubuntu0.2
4.0.4-1
4.0.1-1
4.0.1-2
3.4.6-1
3.4.5-1
3.4.4-1
3.4.2-1
3.3.1-4+deb9u1
3.3.1-4+deb9u1build0.17.10.1
3.0~20140825-8
3.0~20140825-6
3.0~20140825-7
3.0~20140825-5
0.9.0~svn2902-1
0.9.0~svn2903-1
0.9.0~svn2907-1
1.2.1+dfsg2-1
1.2.1+dfsg2-2
1.2.1+dfsg2-3
1.2.2+dfsg1-1
1.3.0+dfsg1-1
1.3.0+dfsg1-2
1.3.1+dfsg1-1
1.3.2+dfsg1-1
1.3.3+dfsg1-1
1.3.3+dfsg1-2
1.4.2+dfsg1-1
1.4.3+dfsg1-1
1.4.4+dfsg1-1
1.4.4+dfsg1-1.1
1.4.4+dfsg1-2
1.4.4+dfsg1-3
2.1.4+dfsg1-1
2.1.4+dfsg2-1
2.1.4+dfsg2-2
2.2.0+dfsg1-1
2.2.1+dfsg1-1
2.2.2+dfsg1-1
2.2.3+dfsg1-1
2.3.0+dfsg1-1
2.3.0+dfsg1-2
2.3.0+dfsg1-3
2.3.0+dfsg1-4
2.3.0+dfsg1-5
2.3.0+dfsg1-6
3.0~20140825-1
3.0~20140825-2
3.0~20140825-3
3.0~20140825-4
3.3.1-4
3.3.1-3
3.3.1-2
3.3.1-1
3.2.3-2
3.2.3-1
3.2.1-2
0.9.1-1
0.9.2-1
0.9.2-2
0.9.3-1
0.9.3-2
0.9.3-3
0.9.4-1
0.9.4-2
0.9.4-3
0.9.4-4
0.9.5-1
0.9.6-1
1.0.0-1
1.0.0-2
1.0.0-3
1.0.0-4
1.0.1-1
1.0.2-1
1.0.2-2
1.0.2-3
1.0.2-4
1.0.3-1
1.0.4-1
1.0.5-1
1.1.0-1
1.1.2-1
1.1.2-2
1.1.3-1
1.1.3-2
1.1.3-3
1.1.3-4
1.2.0-1
2.3.1-1
2.3.3-1
2.3.3-2
2.3.3-3
2.3.3-3.1
2.4.1-1
2.4.2-1
2.5.1-1
2.5.1-2
2.5.2-1
3.2.0-1
3.2.0-2
3.2.0-3
3.2.1-1
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU22884 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2019-18890 |
CWE-89 | High | 3.2.1-2ubuntu0.2, 3.4.4-1ubuntu0.1, 4.0.1-2ubuntu0.1 | 21.11.2019 |
SB2019112110 SB2019112114 SB2019112619 |
||
| #VU22883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-17427 |
CWE-79 | Medium | 3.2.1-2ubuntu0.2, 3.4.4-1ubuntu0.1, 4.0.1-2ubuntu0.1 | 21.11.2019 |
SB2019112110 SB2019112114 SB2019112619 |