Known vulnerabilities in Moodle - page 13

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 618
Public exploits: 26
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 618 known vulnerabilities: 29 high, 250 medium, 338 low Critical High Medium Low

Vulnerabilities (618)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61485 - Improper Access Control
CVE-2022-0984
CWE-284 Medium
No
No
3.9.13, 3.10.10, 3.11.6 21.03.2022 SB2022032101
SB2022031452
SB2022031453
and 1 more
#VU59949 - Cross-Site Request Forgery (CSRF)
CVE-2022-0335
CWE-352 Low
No
No
3.9.12, 3.10.9, 3.11.5 24.01.2022 SB2022012404
#VU59948 - Improper Access Control
CVE-2022-0334
CWE-284 Medium
No
No
3.9.12, 3.10.9, 3.11.5 24.01.2022 SB2022012404
#VU59945 - Improper Access Control
CVE-2022-0333
CWE-284 Medium
No
No
3.9.12, 3.10.9, 3.11.5 24.01.2022 SB2022012401
#VU59944 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-0332
CWE-89 High
Available
No
3.11.5 24.01.2022 SB2022012401
#VU58190 - Permissions, Privileges, and Access Controls
CVE-2021-43560
CWE-264 Medium
No
No
3.9.11, 3.10.8, 3.11.4 16.11.2021 SB2021111615
#VU58189 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3943
CWE-94 High
No
No
3.9.11, 3.10.8, 3.11.4 16.11.2021 SB2021111615
#VU58188 - Cross-Site Request Forgery (CSRF)
CVE-2021-43559
CWE-352 Low
No
No
3.9.11, 3.10.8, 3.11.4 16.11.2021 SB2021111615
#VU58187 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43558
CWE-79 Low
No
No
3.9.11, 3.10.8, 3.11.4 16.11.2021 SB2021111615
#VU56757 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40695
CWE-200 Medium
No
No
3.9.10, 3.10.7, 3.11.3 21.09.2021 SB2021092103
#VU56756 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40694
CWE-200 Low
No
No
3.9.10, 3.10.7, 3.11.3 21.09.2021 SB2021092103
#VU56755 - Improper Authentication
CVE-2021-40693
CWE-287 Medium
No
No
3.9.10, 3.10.7, 3.11.3 21.09.2021 SB2021092103
#VU56754 - Permissions, Privileges, and Access Controls
CVE-2021-40692
CWE-264 Medium
No
No
3.9.10, 3.10.7, 3.11.3 21.09.2021 SB2021092103
#VU56753 - Session Fixation
CVE-2021-40691
CWE-384 Medium
No
No
3.9.10, 3.10.7, 3.11.3 21.09.2021 SB2021092103
#VU54987 - Improper input validation
CVE-2021-36403
CWE-20 Low
No
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54986 - Improper input validation
CVE-2021-36402
CWE-20 Low
No
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54985 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36401
CWE-79 Medium
No
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54984 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2021-36400
CWE-610 Low
No
No
3.9.8, 3.10.5, 3.11.1 19.07.2021 SB2021071911
#VU54983 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36399
CWE-79 Low
No
No
3.11.1 19.07.2021 SB2021071911
#VU54982 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36398
CWE-79 Low
No
No
3.11.1 19.07.2021 SB2021071911


Showing elements 241 - 260 out of 618