Known vulnerabilities in Moodle - page 15

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 605
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 605 known vulnerabilities: 28 high, 241 medium, 335 low Critical High Medium Low

Vulnerabilities (605)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46838 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-25631
CWE-79 Low
No
No
3.7.8, 3.8.5, 3.9.2 21.09.2020 SB2020092106
#VU46837 - Permissions, Privileges, and Access Controls
CVE-2020-25630
CWE-264 Low
No
No
3.5.14, 3.7.8, 3.8.5, 3.9.2 21.09.2020 SB2020092106
#VU46836 - Improper Authorization
CVE-2020-25629
CWE-285 Medium
No
No
3.5.14, 3.7.8, 3.8.5, 3.9.2 21.09.2020 SB2020092106
#VU46835 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-25628
CWE-79 Low
No
No
3.5.14, 3.7.8, 3.8.5, 3.9.2 21.09.2020 SB2020092106
#VU46834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-25627
CWE-79 Low
Available
No
3.9.2 21.09.2020 SB2020092106
#VU31683 - Improper input validation
CVE-2020-14322
CWE-20 Medium
No
No
3.5.13, 3.7.7, 3.8.4, 3.9.1 20.07.2020 SB2020072004
#VU31682 - Permissions, Privileges, and Access Controls
CVE-2020-14321
CWE-264 High
Available
No
3.5.13, 3.7.7, 3.8.4, 3.9.1 20.07.2020 SB2020072004
#VU31681 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-14320
CWE-79 Low
Available
No
3.7.7, 3.8.4, 3.9.1 20.07.2020 SB2020072004
#VU27979 - Improper input validation
CVE-2020-10738
CWE-20 Medium
No
No
3.5.12, 3.6.10, 3.7.6, 3.8.3 18.05.2020 SB2020051815
SB2020051159
SB2020051160
and 1 more
#VU26120 - Improper input validation
CVE-2020-1756
CWE-20 Low
No
No
3.5.11, 3.6.9, 3.7.5, 3.8.2 17.03.2020 SB2020031711
#VU26118 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1755
CWE-451 Medium
No
No
3.5.11, 3.6.9, 3.7.5, 3.8.2 17.03.2020 SB2020031711
#VU26117 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1754
CWE-200 Medium
No
No
3.5.11, 3.6.9, 3.7.5, 3.8.2 17.03.2020 SB2020031711
#VU25422 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1692
CWE-200 Medium
No
No
3.7.2 18.02.2020 SB2020021810
#VU24388 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1691
CWE-79 Low
No
No
3.8.1 20.01.2020 SB2020012003
#VU22907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14884
CWE-79 Low
No
No
3.5.9, 3.6.7, 3.7.3 21.11.2019 SB2019112128
#VU22906 - Improper Authorization
CVE-2019-14883
CWE-285 Low
No
No
3.6.7, 3.7.3 21.11.2019 SB2019112128
#VU22905 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-14882
CWE-601 Low
No
No
3.5.9, 3.6.7, 3.7.3 21.11.2019 SB2019112128
#VU22904 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14881
CWE-79 Low
No
No
3.7.3 21.11.2019 SB2019112128
#VU19267 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1999024
CWE-79 Low
No
No
3.5.12, 3.6.10, 3.7.6, 3.8.3 19.07.2019 SB2018072312
SB2020051815
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358
CWE-1321 Low
Available
No
3.8.4, 3.9.0 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more


Showing elements 281 - 300 out of 605