Known vulnerabilities in MantisBT - page 3

Software: MantisBT
Software CPE: cpe:2.3:a:mantisbt_sourceforge_net:mantisbt:*:*:*:*:*:*:*:*
Total vulnerabilities: 68
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MantisBT MantisBT is affected by 68 known vulnerabilities: 28 medium, 40 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU41065 - Permissions, Privileges, and Access Controls
CVE-2014-8988
CWE-264 Low
No
No
- 24.11.2014 SB2014111804
#VU41066 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8986
CWE-79 Low
No
No
1.2.18 24.11.2014 SB2014111804
#VU41095 - Improper input validation
CVE-2014-7146
CWE-20 Medium
Available
No
- 18.11.2014 SB2014111804
#VU41106 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-8554
CWE-89 Medium
No
No
1.2.18 13.11.2014 SB2014111305
#VU41203 - Improper Authentication
CVE-2014-6387
CWE-287 Medium
No
No
1.2.18 22.10.2014 SB2014030506
SB2014100303
SB2014110406
#VU41608 - Improper input validation
CVE-2013-1883
CWE-20 Medium
No
No
- 27.05.2014 SB2014052702
#VU41668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-0197
CWE-79 Low
No
No
1.2.13 15.05.2014 SB2014051507
#VU41669 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-1810
CWE-79 Low
No
No
1.2.13 15.05.2014 SB2014051508
#VU41963 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-2238
CWE-89 Low
Available
No
1.2.17 05.03.2014 SB2014030506
#VU42170 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4460
CWE-79 Low
No
No
1.2.15 10.01.2014 SB2014011001
#VU43341 - Permissions, Privileges, and Access Controls
CVE-2012-5522
CWE-264 Low
No
No
- 16.11.2012 SB2012111605
#VU43342 - Permissions, Privileges, and Access Controls
CVE-2012-5523
CWE-264 Low
No
No
- 16.11.2012 SB2012111605
#VU43924 - Permissions, Privileges, and Access Controls
CVE-2012-1121
CWE-264 Low
No
No
- 29.06.2012 SB2012062903
#VU43925 - Permissions, Privileges, and Access Controls
CVE-2012-1122
CWE-264 Low
No
No
- 29.06.2012 SB2012062903
#VU43926 - Improper Authentication
CVE-2012-1123
CWE-287 Medium
No
No
- 29.06.2012 SB2012062903
#VU43927 - Permissions, Privileges, and Access Controls
CVE-2012-1118
CWE-264 Medium
No
No
- 29.06.2012 SB2012062903
#VU43928 - Permissions, Privileges, and Access Controls
CVE-2012-1119
CWE-264 Medium
No
No
- 29.06.2012 SB2012062903
#VU43929 - Permissions, Privileges, and Access Controls
CVE-2012-1120
CWE-264 Low
No
No
- 29.06.2012 SB2012062903
#VU43977 - Permissions, Privileges, and Access Controls
CVE-2012-2691
CWE-264 Medium
No
No
- 17.06.2012 SB2012061703
#VU43978 - Permissions, Privileges, and Access Controls
CVE-2012-2692
CWE-264 Low
No
No
- 17.06.2012 SB2012061703


Showing elements 41 - 60 out of 68