Known vulnerabilities in drupal7 (Debian package) 7.32-1+deb8u13

Vendor: Debian
Version: 7.32-1+deb8u13
Software CPE: cpe:2.3:o:debian:drupal7_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 4
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting drupal7 (Debian package) version 7.32-1+deb8u13 drupal7 (Debian package) 7.32-1+deb8u13 is affected by 4 vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358
CWE-1321 Low
Public exploit available
No
7.52-2+deb9u8 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU17807 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-6340
CWE-94 High
Public exploit available
Exploited
7.52-2+deb9u7 21.02.2019 SB2019022101
SB2019032109
#VU17065 - Improper input validation
CWE-20 Medium
No
No
7.52-2+deb9u6 17.01.2019 SB2019011709
SB2019011807
#VU17064 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Medium
No
No
7.52-2+deb9u6 17.01.2019 SB2019011709
SB2019011807