Known vulnerabilities in Mailman

Vendor: GNU
Software: Mailman
Software CPE: cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mailman Mailman is affected by 13 known vulnerabilities: 6 medium, 7 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58503 - Cross-Site Request Forgery (CSRF)
CVE-2021-44227
CWE-352 Medium
No
No
2.1.38 03.12.2021 SB2021120305
SB2021120306
SB2021120314
and 12 more
#VU58350 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-43332
CWE-338 Low
No
No
2.1.36 24.11.2021 SB2021112406
SB2021111823
SB2022053136
and 2 more
#VU58349 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43331
CWE-79 Low
No
No
2.1.36 24.11.2021 SB2021112406
SB2021111823
SB2022053136
and 2 more
#VU58348 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-42096
CWE-338 Medium
No
No
2.1.35 24.11.2021 SB2021112405
SB2021112417
SB2021112419
and 9 more
#VU58347 - Cross-Site Request Forgery (CSRF)
CVE-2021-42097
CWE-352 Medium
No
No
2.1.35 24.11.2021 SB2021112405
SB2021112417
SB2021112419
and 10 more
#VU28635 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-12108
CWE-451 Medium
No
No
2.1.31 05.06.2020 SB2020050628
SB2020060501
SB2020051521
and 6 more
#VU27366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12137
CWE-79 Medium
No
No
2.1.30 27.04.2020 SB2020042718
SB2020043008
SB2020043015
and 6 more
#VU14330 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-13796
CWE-451 Low
No
No
2.1.28 13.08.2018 SB2018081314
SB2018081315
SB2019040811
and 5 more
#VU13585 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0618
CWE-79 Low
No
No
2.1.27 30.06.2018 SB2018070505
SB2018063003
SB2018071601
and 7 more
#VU10445 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5950
CWE-79 Low
Available
No
- 09.02.2018 SB2018021001
SB2018021002
SB2018021003
and 5 more
#VU365 - Cross-Site Request Forgery (CSRF)
CVE-2016-6893
CWE-352 Medium
No
No
- 07.09.2016 SB2016090702
SB2018040606
SB2021120306
and 3 more
#VU44423 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-5024
CWE-79 Low
No
No
- 29.12.2011 SB2011122901
#VU45300 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0707
CWE-79 Low
No
No
- 22.02.2011 SB2011022202