Known vulnerabilities in snipe-it - page 6

Vendor: snipe
Software: snipe-it
Software CPE: cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*
Total vulnerabilities: 112
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting snipe-it snipe-it is affected by 112 known vulnerabilities: 2 high, 25 medium, 84 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59074 - Server-Side Request Forgery (SSRF)
CVE-2021-4075
CWE-918 Medium
No
No
5.3.4 20.12.2021 SB2021122016
#VU59070 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10118
CWE-79 Low
No
No
4.6.14 20.12.2021 SB2019032716
#VU59068 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3879
CWE-79
No
No
5.3.0 20.12.2021 SB2021122014
#VU59067 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3863
CWE-79 Medium
No
No
5.3.0 20.12.2021 SB2021122014
#VU59066 - Cross-Site Request Forgery (CSRF)
CVE-2021-3858
CWE-352 Medium
No
No
5.3.0 20.12.2021 SB2021122014
#VU59065 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3938
CWE-79 Low
No
No
5.3.2 20.12.2021 SB2021112605
#VU59064 - Cross-Site Request Forgery (CSRF)
CVE-2021-3931
CWE-352 Medium
No
No
5.3.2 20.12.2021 SB2021112605
#VU59063 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4018
CWE-79 Low
No
No
5.3.3 20.12.2021 SB2021122015
#VU59062 - Improper Access Control
CVE-2021-4089
CWE-284 Medium
No
No
5.3.4 20.12.2021 SB2021122016
#VU59061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4108
CWE-79 Low
No
No
5.3.5 20.12.2021 SB2021122017
#VU59060 - Cross-Site Request Forgery (CSRF)
CVE-2021-4130
CWE-352 Low
No
No
5.3.6 20.12.2021 SB2021122013
#VU58381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3961
CWE-79 Low
No
No
5.3.2 26.11.2021 SB2021112605


Showing elements 101 - 120 out of 112