Known vulnerabilities in Moodle - page 12

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 605
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 605 known vulnerabilities: 28 high, 241 medium, 335 low Critical High Medium Low

Vulnerabilities (605)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61485 - Improper Access Control
CVE-2022-0984
CWE-284 Medium
No
No
3.9.13, 3.10.10, 3.11.6 21.03.2022 SB2022032101
SB2022031452
SB2022031453
and 1 more
#VU61481 - Permissions, Privileges, and Access Controls
CVE-2022-0985
CWE-264 Medium
No
No
3.9.13, 3.10.10, 3.11.6 21.03.2022 SB2022032101
SB2022031452
SB2022031453
and 1 more
#VU61480 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-0983
CWE-89 Medium
No
No
3.9.13, 3.10.10, 3.11.6 21.03.2022 SB2022032101
SB2022031452
SB2022031453
and 1 more
#VU61427 - Incorrect Regular Expression
CVE-2022-24729
CWE-185 Low
No
No
3.9.13, 3.10.10, 3.11.6 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 24 more
#VU61426 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24728
CWE-79 Low
No
No
3.9.13, 3.10.10, 3.11.6 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 12 more
#VU59949 - Cross-Site Request Forgery (CSRF)
CVE-2022-0335
CWE-352 Low
No
No
3.9.12, 3.10.9, 3.11.5 24.01.2022 SB2022012404
#VU59948 - Improper Access Control
CVE-2022-0334
CWE-284 Medium
No
No
3.9.12, 3.10.9, 3.11.5 24.01.2022 SB2022012404
#VU59945 - Improper Access Control
CVE-2022-0333
CWE-284 Medium
No
No
3.9.12, 3.10.9, 3.11.5 24.01.2022 SB2022012401
#VU59944 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-0332
CWE-89 High
Available
No
3.11.5 24.01.2022 SB2022012401
#VU58190 - Permissions, Privileges, and Access Controls
CVE-2021-43560
CWE-264 Medium
No
No
3.9.11, 3.10.8, 3.11.4 16.11.2021 SB2021111615
#VU58189 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3943
CWE-94 High
No
No
3.9.11, 3.10.8, 3.11.4 16.11.2021 SB2021111615
#VU58188 - Cross-Site Request Forgery (CSRF)
CVE-2021-43559
CWE-352 Low
No
No
3.9.11, 3.10.8, 3.11.4 16.11.2021 SB2021111615
#VU58187 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43558
CWE-79 Low
No
No
3.9.11, 3.10.8, 3.11.4 16.11.2021 SB2021111615
#VU56757 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40695
CWE-200 Medium
No
No
3.9.10, 3.10.7, 3.11.3 21.09.2021 SB2021092103
#VU56756 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40694
CWE-200 Low
No
No
3.9.10, 3.10.7, 3.11.3 21.09.2021 SB2021092103
#VU56755 - Improper Authentication
CVE-2021-40693
CWE-287 Medium
No
No
3.9.10, 3.10.7, 3.11.3 21.09.2021 SB2021092103
#VU56753 - Session Fixation
CVE-2021-40691
CWE-384 Medium
No
No
3.9.10, 3.10.7, 3.11.3 21.09.2021 SB2021092103
#VU54171 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3603
CWE-94 High
No
No
3.9.13, 3.10.10, 3.11.6 16.06.2021 SB2021061620
SB2021070506
SB2022032104
and 4 more
#VU54170 - Improper input validation
CVE-2021-34551
CWE-20 Medium
No
No
3.9.13, 3.10.10, 3.11.6 16.06.2021 SB2021061620
SB2021070506
SB2022032104
and 2 more
#VU52850 - Deserialization of Untrusted Data
CVE-2020-36326
CWE-502 High
No
No
3.9.13, 3.10.10, 3.11.6 04.05.2021 SB2021050416
SB2021053118
SB2022032104
and 2 more


Showing elements 221 - 240 out of 605