Known vulnerabilities in Moodle - page 13

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 605
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 605 known vulnerabilities: 28 high, 241 medium, 335 low Critical High Medium Low

Vulnerabilities (605)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56754 - Permissions, Privileges, and Access Controls
CVE-2021-40692
CWE-264 Medium
No
No
3.9.10, 3.10.7, 3.11.3 21.09.2021 SB2021092103
#VU54987 - Improper input validation
CVE-2021-36403
CWE-20 Low
No
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54986 - Improper input validation
CVE-2021-36402
CWE-20 Low
No
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54985 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36401
CWE-79 Medium
No
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54984 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2021-36400
CWE-610 Low
No
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54983 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36399
CWE-79 Low
No
No
3.11.1 19.07.2021 SB2021071911
#VU54982 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36398
CWE-79 Low
No
No
3.11.1 19.07.2021 SB2021071911
#VU54981 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2021-36397
CWE-610 Low
No
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54980 - Server-Side Request Forgery (SSRF)
CVE-2021-36396
CWE-918 Medium
Available
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54979 - Uncontrolled Recursion
CVE-2021-36395
CWE-674 Low
No
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54978 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-36394
CWE-94 High
Available
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54977 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-36393
CWE-89 High
Available
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54976 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-36392
CWE-89 High
No
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54334 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-21809
CWE-78 Low
Available
No
3.11.0 23.06.2021 SB2021062308
#VU53305 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32472
CWE-200 Low
No
No
3.8.9, 3.9.7, 3.10.4, 3.11 17.05.2021 SB2021051707
#VU53304 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32473
CWE-200 Low
No
No
3.5.18, 3.8.9, 3.9.7, 3.10.4, 3.11 17.05.2021 SB2021051707
#VU53303 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-32474
CWE-89 Low
No
No
3.5.18, 3.8.9, 3.9.7, 3.10.4, 3.11 17.05.2021 SB2021051707
#VU53302 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32475
CWE-79 Low
No
No
3.5.18, 3.8.9, 3.9.7, 3.10.4, 3.11 17.05.2021 SB2021051707
#VU53301 - Improper input validation
CVE-2021-32476
CWE-20 Medium
No
No
3.5.18, 3.8.9, 3.9.7, 3.10.4, 3.11 17.05.2021 SB2021051707
#VU53299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32478
CWE-79 Low
No
No
3.8.9, 3.9.7, 3.10.4 17.05.2021 SB2021051707


Showing elements 241 - 260 out of 605