Known vulnerabilities in OpenLiteSpeed

Software: OpenLiteSpeed
Software CPE: cpe:2.3:a:litespeedtech:litespeed:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenLiteSpeed OpenLiteSpeed is affected by 13 known vulnerabilities: 1 high, 4 medium, 8 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63300 - Missing release of memory after effective lifetime
CWE-401 Medium
No
No
1.7.16 17.05.2022 SB2022051716
#VU51828 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.7.9.1 31.03.2021 SB2021033116
#VU50660 - Improper Privilege Management
CWE-269 Medium
Available
No
1.7.9 12.02.2021 SB2021021203
#VU50076 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Low
Available
No
1.7.9 28.01.2021 SB2021012809
#VU30453 - Improper input validation
CVE-2020-5519
CWE-20 High
No
No
1.6.5 06.01.2020 SB2020010614
#VU16750 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
1.4.41 28.12.2018 SB2018122803
#VU16749 - Missing release of memory after effective lifetime
CWE-401 Low
No
No
1.4.41 28.12.2018 SB2018122803
#VU16748 - Buffer overflow
CWE-120 Low
No
No
1.4.41 28.12.2018 SB2018122803
#VU16747 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
1.4.41 28.12.2018 SB2018122803
#VU36348 - Improper input validation
CVE-2018-19791
CWE-20 Medium
No
No
1.5.0 03.12.2018 SB2018120316
#VU36349 - Memory corruption
CVE-2018-19792
CWE-119 Low
No
No
- 03.12.2018 SB2018120319
#VU12158 - Null Byte Interaction Error (Poison Null Byte)
CVE-2010-2333
CWE-626 Low
Available
No
- 25.04.2018 SB2010061301
#VU38230 - Use After Free
CVE-2015-3890
CWE-416 Medium
No
No
1.3.10 20.09.2017 SB2017092017