Known vulnerabilities in MantisBT - page 2

Software: MantisBT
Software CPE: cpe:2.3:a:mantisbt_sourceforge_net:mantisbt:*:*:*:*:*:*:*:*
Total vulnerabilities: 68
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MantisBT MantisBT is affected by 68 known vulnerabilities: 28 medium, 40 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU35847 - Improper input validation
CVE-2018-9839
CWE-20 Medium
No
No
- 06.06.2019 SB2017021717
#VU38508 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9701
CWE-79 Low
No
No
1.2.19 09.08.2017 SB2015012606
#VU7652 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12062
CWE-79 Low
No
No
- 02.08.2017 SB2017080202
#VU7651 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12061
CWE-79 Low
No
No
- 02.08.2017 SB2017080202
#VU6633 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Low
No
No
- 23.05.2017 SB2017052306
#VU6631 - Cross-Site Request Forgery (CSRF)
CVE-2017-7620
CWE-352 Medium
Available
No
- 23.05.2017 SB2017052306
#VU39176 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7897
CWE-79 Low
No
No
2.3.2 18.04.2017 SB2017041807
#VU6185 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6973
CWE-79 Low
No
No
- 31.03.2017 SB2017033102
#VU39312 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7241
CWE-79 Low
No
No
1.3.9 31.03.2017 SB2017033105
#VU39313 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7309
CWE-79 Low
No
No
1.3.9 31.03.2017 SB2017033106
#VU31437 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6797
CWE-79 Low
No
No
2.2.1 10.03.2017 SB2017031004
#VU39639 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-7111
CWE-79 Low
No
No
1.3.1 17.02.2017 SB2017021717
#VU40399 - Exposure of sensitive information to an unauthorized actor
CVE-2014-9759
CWE-200 Medium
No
No
1.3.0 12.04.2016 SB2015012606
#VU40668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8987
CWE-79 Low
No
No
1.2.18 24.08.2015 SB2014111804
#VU40898 - Improper input validation
CVE-2015-1042
CWE-20 Medium
No
No
- 10.02.2015 SB2015021003
#VU40926 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-9573
CWE-89 Low
No
No
1.2.19 26.01.2015 SB2015012606
SB2015012715
#VU40927 - Improper Access Control
CVE-2014-9572
CWE-284 Medium
No
No
- 26.01.2015 SB2015012606
SB2015012715
#VU40928 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9571
CWE-79 Low
No
No
1.2.19 26.01.2015 SB2015012606
SB2015012715
#VU41027 - Exposure of sensitive information to an unauthorized actor
CVE-2014-9279
CWE-200 Medium
No
No
- 08.12.2014 SB2014111804
#VU41028 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9270
CWE-79 Low
No
No
1.2.18 08.12.2014 SB2014111804


Showing elements 21 - 40 out of 68