Known vulnerabilities in IntelliJ IDEA - page 2

Software: IntelliJ IDEA
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:intellij_idea:*:*:*:*:*:*:*:*
Total vulnerabilities: 40
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IntelliJ IDEA IntelliJ IDEA is affected by 40 known vulnerabilities: 4 high, 20 medium, 16 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143810 - Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-49382
CWE-1336 Low
No
No
2026.1 17.08.2026 SB2026081786
#VU143809 - Missing Authorization
CVE-2026-49367
CWE-862 Medium
No
No
2026.1.1 17.08.2026 SB2026050548
#VU143808 - Command injection
CVE-2026-49366
CWE-77 Low
No
No
2026.1.1 17.08.2026 SB2026050548
#VU129686 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-41882
CWE-59 Medium
No
No
2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 05.05.2026 SB2026050548
#VU120173 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-68269
CWE-349 Medium
No
No
2025.3 17.12.2025 SB2025121736
#VU114378 - Cleartext Transmission of Sensitive Information
CVE-2025-57727
CWE-319 Medium
No
No
2025.2 22.08.2025 SB2025082212
#VU114377 - Incorrect Authorization
CVE-2025-57728
CWE-863 Low
No
No
2025.2 22.08.2025 SB2025082212
#VU114376 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2025-57729
CWE-829 Medium
No
No
2025.2 22.08.2025 SB2025082212
#VU114375 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-57730
CWE-79 Low
No
No
2025.2 22.08.2025 SB2025082212
#VU143892 - Information Exposure Through Log Files
CVE-2025-32054
CWE-532 Low
No
No
2024.2.4, 2024.3 03.04.2025 SB20250403143
#VU60364 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24346
CWE-94 Medium
No
No
2021.3.1 08.02.2022 SB2022020803
#VU60363 - Permissions, Privileges, and Access Controls
CVE-2022-24345
CWE-264 Medium
No
No
2021.2.4 08.02.2022 SB2022020803
#VU50376 - Deserialization of Untrusted Data
CVE-2021-25758
CWE-502 Medium
No
No
2020.3 03.02.2021 SB2021020504
#VU50377 - Cleartext Transmission of Sensitive Information
CVE-2021-25756
CWE-319 Medium
No
No
2020.2 03.02.2021 SB2021020504
#VU27578 - Authentication Bypass by Spoofing
CVE-2020-11690
CWE-290 Medium
No
No
2020.1 07.05.2020 SB2020050701
#VU24894 - Exposure of sensitive information to an unauthorized actor
CVE-2020-7914
CWE-200 Medium
No
No
2019.3 04.02.2020 SB2020020404
#VU24845 - Exposure of sensitive information to an unauthorized actor
CVE-2020-7905
CWE-200 Medium
No
No
2019.3 03.02.2020 SB2020020404
#VU24844 - Cleartext Transmission of Sensitive Information
CVE-2020-7904
CWE-319 Low
No
No
2019.3 03.02.2020 SB2020020404
#VU22500 - Cleartext Transmission of Sensitive Information
CVE-2019-14954
CWE-319 Medium
No
No
2019.2 04.11.2019 SB2019110408
#VU22499 - Permissions, Privileges, and Access Controls
CVE-2019-18361
CWE-264 Low
No
No
2019.2 04.11.2019 SB2019110408


Showing elements 21 - 40 out of 40