Known vulnerabilities in Symfony - page 4

Vendor: SensioLabs
Software: Symfony
Software CPE: cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*
Total vulnerabilities: 88
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Symfony Symfony is affected by 88 known vulnerabilities: 14 high, 51 medium, 23 low Critical High Medium Low

Vulnerabilities (88)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30475 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4752
CWE-79 Low
No
No
2.3.3 02.01.2020 SB2019110114
SB2013081004
#VU35878 - Improper Access Control
CVE-2017-11365
CWE-284 High
No
No
- 23.05.2019 SB2019052337
#VU18300 - Improper input validation
CVE-2019-10913
CWE-20 Medium
No
No
2.7.51, 2.8.50, 3.4.26, 4.1.12, 4.2.7 18.04.2019 SB2019041802
SB2019051003
SB2019041827
and 7 more
#VU18299 - Deserialization of Untrusted Data
CVE-2019-10912
CWE-502 Medium
No
No
2.8.50, 3.4.26, 4.1.12, 4.2.7 18.04.2019 SB2019041802
SB2019051003
SB2019062507
and 8 more
#VU18298 - Improper Authentication
CVE-2019-10911
CWE-287 Medium
No
No
2.7.51, 2.8.50, 3.4.26, 4.1.12, 4.2.7 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18297 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-10910
CWE-94 High
No
No
2.7.51, 2.8.50, 3.4.26, 4.1.12, 4.2.7 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10909
CWE-79 Medium
No
No
2.7.51, 2.8.50, 3.4.26, 4.1.12, 4.2.7 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU16615 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-19790
CWE-601 Low
No
No
2.7.50, 2.8.49, 3.4.20, 4.0.15, 4.1.9, 4.2.1 19.12.2018 SB2018121906
SB2019051003
SB2018120740
and 5 more
#VU16614 - Improper input validation
CVE-2018-19789
CWE-20 High
No
No
2.7.50, 2.8.49, 3.4.20, 4.0.15, 4.1.9, 4.2.1 19.12.2018 SB2018121906
SB2019051003
SB2018120740
and 5 more
#VU14165 - Exposed Dangerous Method or Function
CVE-2018-14773
CWE-749 Low
No
No
2.7.49, 2.8.44, 3.3.18, 3.4.14, 4.0.14, 4.1.3 01.08.2018 SB2018080118
SB2018080119
SB2019051003
#VU31280 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-16652
CWE-601 Low
No
No
3.3.13 13.06.2018 SB2018061316
SB2017121225
SB2018062631
and 1 more
#VU31281 - Session Fixation
CVE-2018-11385
CWE-384 High
No
No
4.0.11 13.06.2018 SB2018061317
SB2018052818
SB2018052819
and 3 more
#VU31282 - Insufficient Session Expiration
CVE-2018-11386
CWE-613 Medium
No
No
4.0.11 13.06.2018 SB2018061317
SB2018052818
SB2018052819
and 3 more
#VU31283 - Cross-Site Request Forgery (CSRF)
CVE-2018-11406
CWE-352 Medium
No
No
4.0.11 13.06.2018 SB2018061317
SB2018052818
SB2018052819
and 3 more
#VU31284 - Improper Authentication
CVE-2018-11407
CWE-287 High
No
No
4.0.7 13.06.2018 SB2018061318
SB2018062631
SB2018062632
#VU31285 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-11408
CWE-601 Low
No
No
4.0.11 13.06.2018 SB2018061317
SB2018052818
SB2018052819
and 3 more
#VU39726 - Improper Authentication
CVE-2016-2403
CWE-287 High
No
No
- 07.02.2017 SB2017020707
#VU40585 - Cross-Site Request Forgery (CSRF)
CVE-2015-8125
CWE-352 Medium
No
No
- 07.12.2015 SB2015120704
SB2015112602
SB2015112603
and 1 more
#VU40586 - Improper input validation
CVE-2015-8124
CWE-20 Medium
No
No
- 07.12.2015 SB2015120704
SB2015112602
SB2015112603
and 1 more
#VU40709 - Improper Control of Generation of Code ('Code Injection')
CVE-2015-2308
CWE-94 Medium
No
No
- 24.06.2015 SB2015062407
SB2015040202
SB2015040203
and 1 more


Showing elements 61 - 80 out of 88