Known vulnerabilities in Moodle - page 11

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 605
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 605 known vulnerabilities: 28 high, 241 medium, 335 low Critical High Medium Low

Vulnerabilities (605)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69470 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-45150
CWE-79 Low
No
No
3.9.18, 3.11.11, 4.0.5 21.11.2022 SB2022112143
SB2022112862
SB2022112863
and 1 more
#VU69469 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-45151
CWE-79 Low
No
No
3.11.11, 4.0.5 21.11.2022 SB2022112143
SB2022112862
SB2022112863
and 1 more
#VU69468 - Server-Side Request Forgery (SSRF)
CVE-2022-45152
CWE-918 Medium
No
No
3.9.18, 3.11.11, 4.0.5 21.11.2022 SB2022112143
SB2022112862
SB2022112863
and 1 more
#VU67682 - Improper Access Control
CVE-2022-40208
CWE-284 Low
No
No
3.9.16, 3.11.9, 4.0.3 27.09.2022 SB2022092736
#VU67471 - Permissions, Privileges, and Access Controls
CVE-2022-40316
CWE-264 Low
No
No
3.9.17, 3.11.10, 4.0.4 19.09.2022 SB2022091919
#VU67470 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-40315
CWE-89 Low
No
No
3.9.17, 3.11.10, 4.0.4 19.09.2022 SB2022091919
#VU67469 - Deserialization of Untrusted Data
CVE-2022-40314
CWE-502 Medium
No
No
3.9.17, 3.11.10, 4.0.4 19.09.2022 SB2022091919
#VU67468 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-40313
CWE-79 Low
No
No
3.9.17, 3.11.10, 4.0.4 19.09.2022 SB2022091919
#VU66892 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-0323
CWE-94 High
No
No
3.9.16, 3.11.9, 4.0.3 31.08.2022 SB2022083119
SB2022083120
#VU66891 - Cross-Site Request Forgery (CSRF)
CVE-2022-2986
CWE-352 Medium
No
No
3.11.9, 4.0.3 31.08.2022 SB2022083121
#VU65407 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-35650
CWE-22 Medium
No
No
3.9.15, 3.11.8, 4.0.2 19.07.2022 SB2022071901
SB2022071834
SB2022071835
#VU65405 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35651
CWE-79 Low
No
No
3.9.15, 3.11.8, 4.0.2 19.07.2022 SB2022071901
SB2022071834
SB2022071835
#VU65404 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-35652
CWE-601 Medium
No
No
3.9.15, 3.11.8, 4.0.2 19.07.2022 SB2022071901
SB2022071834
SB2022071835
#VU65403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35653
CWE-79 Low
No
No
3.9.15, 3.11.8, 4.0.2 19.07.2022 SB2022071901
SB2022071834
SB2022071835
#VU65376 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-35649
CWE-94 High
No
No
3.9.15, 3.11.8, 4.0.2 18.07.2022 SB2022071805
SB2022071834
SB2022071835
#VU63339 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-30596
CWE-79 Low
No
No
3.9.14, 3.10.11, 3.11.7, 4.0.1 17.05.2022 SB2022051723
SB2022051861
SB2022051862
and 1 more
#VU63338 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30597
CWE-200 Medium
No
No
3.9.14, 3.10.11, 3.11.7, 4.0.1 17.05.2022 SB2022051723
SB2022051861
SB2022051862
and 1 more
#VU63337 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30598
CWE-200 Medium
No
No
3.9.14, 3.10.11, 3.11.7, 4.0.1 17.05.2022 SB2022051723
SB2022051861
SB2022051862
and 1 more
#VU63336 - Improper Restriction of Excessive Authentication Attempts
CVE-2022-30600
CWE-307 Medium
Available
No
3.9.14, 3.10.11, 3.11.7, 4.0.1 17.05.2022 SB2022051723
SB2022051861
SB2022051862
and 1 more
#VU63335 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-30599
CWE-89 Medium
No
No
3.9.14, 3.10.11, 3.11.7, 4.0.1 17.05.2022 SB2022051723
SB2022051861
SB2022051862
and 1 more


Showing elements 201 - 220 out of 605