Known vulnerabilities in ModSecurity

Vendor: Trustwave
Software: ModSecurity
Software CPE: cpe:2.3:a:trustwave:modsecurity:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 22
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ModSecurity ModSecurity is affected by 22 known vulnerabilities: 2 high, 18 medium, 2 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135853 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-52747
CWE-180 High
No
No
3.0.16 29.06.2026 SB20260629135
#VU135852 - Use of sizeof() on a Pointer Type
CVE-2026-52761
CWE-467 Medium
No
No
3.0.16 29.06.2026 SB20260629135
#VU128453 - Out-of-bounds read
CVE-2026-30923
CWE-125 Medium
No
No
2.9.13, 3.0.15 29.04.2026 SB2026042914
#VU128452 - Integer underflow
CVE-2026-42268
CWE-191 Medium
No
No
3.0.15 29.04.2026 SB2026042914
#VU113672 - Unchecked Return Value
CVE-2025-54571
CWE-252 Medium
No
No
2.9.12 06.08.2025 SB2025080617
SB20250816115
SB20250816119
and 40 more
#VU112103 - Memory corruption
CVE-2025-52891
CWE-119 Medium
No
No
2.9.11 02.07.2025 SB2025070255
SB2025071041
SB20250711184
and 5 more
#VU110075 - Resource exhaustion
CVE-2025-48866
CWE-400 Medium
No
No
2.9.10 02.06.2025 SB2025060248
SB2025060505
SB2025060901
and 9 more
#VU109658 - Resource exhaustion
CVE-2025-47947
CWE-400 Medium
No
No
2.9.9 22.05.2025 SB2025052240
SB2025052973
SB2025052974
and 20 more
#VU105981 - Protection Mechanism Failure
CVE-2025-27110
CWE-693 Medium
No
No
3.0.14 24.03.2025 SB2025032450
SB2025052701
SB2025052702
and 2 more
#VU85913 - Improper input validation
CVE-2024-1019
CWE-20 Medium
No
No
3.0.12 30.01.2024 SB2024013085
SB2024021101
SB2024021102
and 3 more
#VU83966 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Low
No
No
3.0.11 07.12.2023 SB2023120711
#VU79793 - Improper Handling of Exceptional Conditions
CVE-2019-25043
CWE-755 Medium
No
No
3.0.4 21.08.2023 SB2020012222
SB2023082164
#VU72086 - Memory corruption
CVE-2023-24021
CWE-119 High
No
No
2.9.7 09.02.2023 SB2023020947
SB2023021587
SB2023021740
and 7 more
#VU72085 - Improper input validation
CVE-2022-48279
CWE-20 Medium
No
No
2.9.6, 3.0.8 09.02.2023 SB2023020946
SB2023020948
SB2023020949
and 15 more
#VU59052 - Uncontrolled Recursion
CVE-2021-42717
CWE-674 Medium
No
No
2.9.5, 3.0.6 19.12.2021 SB2021121901
SB2021121902
SB2023011845
and 5 more
#VU46766 - Resource exhaustion
CVE-2020-15598
CWE-400 Medium
No
No
3.0.5 16.09.2020 SB2020091642
SB2020092001
SB2023082164
#VU24491 - Improper input validation
CVE-2019-19886
CWE-20 Medium
No
No
3.0.4 22.01.2020 SB2020012222
SB2020032106
SB2020032107
and 2 more
#VU41813 - Permissions, Privileges, and Access Controls
CVE-2013-5705
CWE-264 Medium
No
No
- 15.04.2014 SB2014041503
SB2014050703
SB2014050704
and 2 more
#VU42869 - Improper input validation
CVE-2013-1915
CWE-20 Medium
No
No
- 26.04.2013 SB2013042605
SB2013040301
SB2013040905
#VU43224 - Permissions, Privileges, and Access Controls
CVE-2012-4528
CWE-264 Medium
Available
No
- 28.12.2012 SB2012122801
SB2012111501
SB2012111705


Showing elements 1 - 20 out of 22