Known vulnerabilities in Cobbler

Software: Cobbler
Software CPE: cpe:2.3:a:cobbler_project:cobbler:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cobbler Cobbler is affected by 10 known vulnerabilities: 2 high, 2 medium, 6 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100775 - Improper Authentication
CVE-2024-47533
CWE-287 High
Available
No
3.2.3, 3.3.7 21.11.2024 SB2024112117
SB2024112128
SB2024112129
and 9 more
#VU86855 - Improper Authorization
CVE-2022-0860
CWE-285 Medium
No
No
3.3.2 27.02.2024 SB2024022765
SB2024022766
SB2024022767
and 6 more
#VU35056 - Cross-Site Request Forgery (CSRF)
CVE-2011-4952
CWE-352 High
No
No
- 19.11.2019 SB2019111928
#VU35057 - Improper Privilege Management
CVE-2011-4954
CWE-269 Low
No
No
- 19.11.2019 SB2019111928
#VU36766 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9605
CWE-79 Low
No
No
- 22.08.2018 SB2018082221
#VU14497 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1000225
CWE-79 Low
No
No
- 22.08.2018 SB2018082302
SB2018090307
#VU14492 - Permissions, Privileges, and Access Controls
CVE-2018-1000226
CWE-264 Low
No
No
- 21.08.2018 SB2018082208
SB2018090307
SB2018112503
and 7 more
#VU14482 - Permissions, Privileges, and Access Controls
CVE-2018-10931
CWE-264 Low
No
No
- 20.08.2018 SB2018082109
SB2018082110
SB2018090307
and 14 more
#VU41683 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-3225
CWE-22 Low
Available
No
- 14.05.2014 SB2014051415
SB2014071802
SB2014071803
#VU43981 - Improper input validation
CVE-2012-2395
CWE-20 Medium
No
No
- 16.06.2012 SB2012061601