Known vulnerabilities in vBulletin 4.2.2 Patch Level 3
Vendor:
vBulletin
Software:
vBulletin
Version:
4.2.2 Patch Level 3
Software CPE:
cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*
Website:
https://www.vbulletin.com
Total vulnerabilities:
4
Public exploits:
2
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
6.1.6
6.1.5
6.1.4
6.1.3
6.0.1
6.0.2
5.7.5 Patch Level 3
6.0.1 Patch Level 1
6.0.2 Patch Level 1
6.0.3 Patch Level 1
5.7.5 Patch Level 2
6.1.2
6.1.1
6.1.0
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.0
5.7.5
5.7.4
5.7.3
5.7.2
5.7.1
5.6.9
5.6.8
5.6.6
5.6.3
5.1.9
3.6
5.0.0
5.3.4 Patch Level 1
5.3.3 Patch Level 1
5.3.2 Patch Level 2
5.3.2 Patch Level 1
5.6.2
5.5.6 Patch Level 1
5.6.0 Patch Level 1
5.6.1 Patch Level 1
5.6.1
5.6.0
5.5.6
5.5.5
5.5.2 Patch Level 2
5.5.3 Patch Level 2
5.5.4 Patch Level 2
5.5.2 Patch Level 1
5.5.3 Patch Level 1
5.5.4 Patch Level 1
5.5.4
5.5.3
5.5.2
5.5.1
5.5.0
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4.0
5.3.4
5.3.3
5.3.2
5.3.1
5.3.0
5.2.6
5.2.5
3.8.10
5.2.4
5.2.3
5.1.8
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1.0
4.2.1
4.2.0
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
4.1.12
4.1.11
4.1.10
4.1.3
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.2
4.1.1
4.1.0
4.0.8
4.0.7
4.0.6
4.0.5
3.8.6
4.0.4
4.0.3
3.8.5
4.0.2
4.0.1
4.0.0
3.8.4
3.8.3
3.8.2
3.8.1
3.8.0
3.7.6
3.7.5
3.7.4
3.7.3
3.6.12
3.7.2
3.7.1
3.6.11
3.6.10
3.6.9
3.6.7
3.5.7
3.5.6
3.5.5
3.0.17
3.0.16
3.0.15
2.3.11
2.3.10
3.0.14
3.0.13
3.0.11
2.3.9
2.3.7
2.3.5
2.3.1
2.0.0
1.1.6
4.2.5
4.2.4
5.0
4.1
3.6.8
3.6.6
3.6.5
3.6.4
3.6.3
3.6.2
3.6.1
3.6.0
3.5.0 beta 2
3.5.0 beta 3
3.5.0 beta 1
3.5.0 rc1
3.5.0 rc3
3.5.0 rc2
3.5.0
3.5.0 beta 4
3.5.8
3.5.4
3.5.3
3.0.12
3.5.2
2.3.8
3.5.1
3.0.10
3.0.9
3.0.8
3.0.7
2.0 beta 3
3.0
2.0.3
2.3.4
2.3.2
3.0 beta 6
3.0 gamma
2.3.3
3.0 beta 7
3.0 beta 5
1.0.1
3.0 beta 3
3.0 beta 4
3.0.0
3.0.2
3.0.0 rc4
3.0.4
3.0.6
3.0.3
3.0.5
3.0.0 can4
3.0.1
3.0 beta 2
2.3.0
3.0.0 beta 2
2.2.9 can
2.0
2.0.2
2.2.9
2.0.1
2.2.5
2.2.6
2.2.7
2.2.8
2.2.1
2.0 rc3
2.0 rc2
2.2.2
2.2.3
2.2.0
2.2.4
2.1.9
2.0 beta 2
1.1.5
3.8.9 Patch Level 1
3.8.9
3.8.8 Patch Level 2
3.8.8 Patch Level 1
3.8.8
3.8.7 Patch Level 6
3.8.7 Patch Level 5
3.8.7 Patch Level 4
3.8.7 Patch Level 3
3.8.7 Patch Level 2
3.8.7 Patch Level 1
3.8.7
5.2.0 Patch Level 1
5.2.0 Patch Level 2
5.2.2 Patch Level 1
5.2.1 Patch Level 1
5.2.0 Patch Level 3
5.2.2
5.2.1
5.2.0
4.2.3 Patch Level 1
4.2.3
4.2.2 Patch Level 5
4.2.2 Patch Level 4
4.2.2 Patch Level 3
4.2.2 Patch Level 2
4.2.2 Patch Level 1
4.2.2
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU10311 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2018-6200 |
CWE-601 | Low | - | 26.01.2018 |
SB2018012904 |
||
| #VU5836 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2016-6195 |
CWE-89 | Critical | - | 16.02.2017 |
SB2016061502 |
||
| #VU300 - Server-Side Request Forgery (SSRF) CVE-2016-6483 |
CWE-918 | Critical | - | 10.08.2016 |
SB2016081009 |
||
| #VU158 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CWE-89 | High | - | 18.07.2016 |
SB2016061701 |