Known vulnerabilities in Moodle - page 22

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 605
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 605 known vulnerabilities: 28 high, 241 medium, 335 low Critical High Medium Low

Vulnerabilities (605)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU40747 - Cross-Site Request Forgery (CSRF)
CVE-2015-0218
CWE-352 Medium
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40748 - Resource Management Errors
CVE-2015-0217
CWE-399 Low
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40750 - Exposure of sensitive information to an unauthorized actor
CVE-2015-0215
CWE-200 Low
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40751 - Permissions, Privileges, and Access Controls
CVE-2015-0214
CWE-264 Low
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40752 - Cross-Site Request Forgery (CSRF)
CVE-2015-0213
CWE-352 Medium
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40753 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-0212
CWE-79 Low
No
No
2.6.7, 2.7.4, 2.8.2 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40754 - Exposure of sensitive information to an unauthorized actor
CVE-2015-0211
CWE-200 Low
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU41068 - Improper input validation
CVE-2014-9060
CWE-20 Medium
No
No
- 24.11.2014 SB2014112403
#VU41069 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9059
CWE-79 Low
No
No
- 24.11.2014 SB2014112403
#VU41070 - Exposure of sensitive information to an unauthorized actor
CVE-2014-7848
CWE-200 Medium
No
No
- 24.11.2014 SB2014112403
#VU41071 - Resource Management Errors
CVE-2014-7847
CWE-399 Medium
No
No
- 24.11.2014 SB2014112403
#VU41072 - Permissions, Privileges, and Access Controls
CVE-2014-7846
CWE-264 Low
No
No
- 24.11.2014 SB2014112403
#VU41073 - Credentials Management
CVE-2014-7845
CWE-255 Medium
No
No
- 24.11.2014 SB2014112403
#VU41074 - Cross-Site Request Forgery (CSRF)
CVE-2014-7838
CWE-352 Medium
No
No
- 24.11.2014 SB2014112403
#VU41075 - Permissions, Privileges, and Access Controls
CVE-2014-7837
CWE-264 Low
No
No
- 24.11.2014 SB2014112403
#VU41076 - Cross-Site Request Forgery (CSRF)
CVE-2014-7836
CWE-352 Medium
No
No
- 24.11.2014 SB2014112403
#VU41077 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-7835
CWE-79 Low
No
No
- 24.11.2014 SB2014112403
#VU41078 - Permissions, Privileges, and Access Controls
CVE-2014-7834
CWE-264 Low
No
No
- 24.11.2014 SB2014112403
#VU41079 - Exposure of sensitive information to an unauthorized actor
CVE-2014-7833
CWE-200 Low
No
No
- 24.11.2014 SB2014112403
#VU41080 - Permissions, Privileges, and Access Controls
CVE-2014-7832
CWE-264 Low
No
No
- 24.11.2014 SB2014112403


Showing elements 421 - 440 out of 605