Known vulnerabilities in Bugzilla

Vendor: Mozilla
Software: Bugzilla
Software CPE: cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bugzilla Bugzilla is affected by 24 known vulnerabilities: 13 medium, 11 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU10660 - Cross-Site Request Forgery (CSRF)
CVE-2018-5123
CWE-352 Low
No
No
- 19.02.2018 SB2018022011
SB2018021802
SB2018021803
#VU40562 - Exposure of sensitive information to an unauthorized actor
CVE-2015-8509
CWE-200 Low
No
No
- 03.01.2016 SB2016010302
#VU40563 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-8508
CWE-79 Low
No
No
- 03.01.2016 SB2016010302
#VU40651 - Improper input validation
CVE-2015-4499
CWE-20 Medium
No
No
- 14.09.2015 SB2015091405
SB2015091301
SB2015091302
and 1 more
#VU40919 - Command injection
CVE-2014-8630
CWE-77 Low
No
No
- 01.02.2015 SB2015020102
SB2015020402
#VU41404 - Cross-Site Request Forgery (CSRF)
CVE-2014-1546
CWE-352 Medium
No
No
- 14.08.2014 SB2014081403
#VU42424 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-1743
CWE-79 Low
Available
No
- 24.10.2013 SB2013102402
#VU42425 - Cross-Site Request Forgery (CSRF)
CVE-2013-1733
CWE-352 Medium
No
No
- 24.10.2013 SB2013102402
#VU43061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-0785
CWE-79 Low
No
No
- 24.02.2013 SB2013022404
#VU43337 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4189
CWE-79 Low
No
No
- 16.11.2012 SB2012111603
#VU43338 - Exposure of sensitive information to an unauthorized actor
CVE-2012-4198
CWE-200 Low
No
No
- 16.11.2012 SB2012111603
#VU43339 - Exposure of sensitive information to an unauthorized actor
CVE-2012-4199
CWE-200 Medium
No
No
- 16.11.2012 SB2012111603
#VU43340 - Exposure of sensitive information to an unauthorized actor
CVE-2012-5884
CWE-200 Medium
No
No
- 16.11.2012 SB2012111604
#VU43776 - Permissions, Privileges, and Access Controls
CVE-2012-1968
CWE-264 Medium
No
No
- 30.07.2012 SB2012073001
#VU44122 - Permissions, Privileges, and Access Controls
CVE-2012-0465
CWE-264 Medium
No
No
- 27.04.2012 SB2012020205
#VU44226 - Cross-Site Request Forgery (CSRF)
CVE-2012-0453
CWE-352 Medium
No
No
- 25.02.2012 SB2012020205
#VU44343 - Cross-Site Request Forgery (CSRF)
CVE-2012-0440
CWE-352 Medium
No
No
- 02.02.2012 SB2012020205
#VU44824 - Improper Control of Generation of Code ('Code Injection')
CVE-2011-2381
CWE-94 Medium
No
No
- 09.08.2011 SB2011080903
#VU44826 - Improper input validation
CVE-2011-2978
CWE-20 Medium
No
No
- 09.08.2011 SB2011080903
#VU44827 - Improper input validation
CVE-2011-2979
CWE-20 Medium
No
No
- 09.08.2011 SB2011080903


Showing elements 1 - 20 out of 24