Known vulnerabilities in Zulip Server - page 2

Vendor: Zulip
Software: Zulip Server
Software CPE: cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zulip Server Zulip Server is affected by 66 known vulnerabilities: 6 high, 26 medium, 34 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106254 - Exposure of sensitive information to an unauthorized actor
CVE-2025-27149
CWE-200 Low
No
No
10.0 31.03.2025 SB2025033107
#VU102877 - Exposure of sensitive information to an unauthorized actor
CVE-2024-56136
CWE-200 Medium
No
No
9.4 17.01.2025 SB2025011708
#VU87651 - Improper Access Control
CVE-2024-27286
CWE-284 Low
No
No
8.3 20.03.2024 SB2024032026
#VU86274 - Improper Privilege Management
CVE-2024-21630
CWE-269 Low
No
No
8.1 08.02.2024 SB2024020862
#VU83257 - Improper Access Control
CVE-2023-47642
CWE-284 Low
No
No
7.5 17.11.2023 SB2023111746
#VU80017 - Improper Authorization
CVE-2023-32678
CWE-285 Medium
No
No
7.3 25.08.2023 SB2023082527
#VU76615 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33186
CWE-79 Low
No
No
7.0 beta3 30.05.2023 SB2023053011
#VU76394 - Improper Privilege Management
CVE-2023-32677
CWE-269 Low
No
No
6.2 20.05.2023 SB2023052002
#VU76393 - Improper Authorization
CVE-2023-28623
CWE-285 Medium
No
No
6.2 20.05.2023 SB2023052002
#VU72011 - Unrestricted Upload of File with Dangerous Type
CVE-2023-22735
CWE-434 Medium
No
No
- 07.02.2023 SB2023020750
#VU69404 - Information Exposure Through Timing Discrepancy
CVE-2022-41914
CWE-208 Medium
No
No
5.7 17.11.2022 SB2022111725
#VU141409 - Improper Access Control
CVE-2022-36048
CWE-284 Low
No
No
5.6 25.08.2022 SB2022082560
#VU65857 - Permissions, Privileges, and Access Controls
CVE-2022-31134
CWE-264 Medium
No
No
5.4 28.07.2022 SB2022072827
#VU65765 - Improper Authorization
CVE-2022-31168
CWE-285 Medium
No
No
5.5 25.07.2022 SB2022072545
#VU64584 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31017
CWE-200 Medium
No
No
5.3 22.06.2022 SB2022062226
#VU61421 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-24751
CWE-362 Medium
No
No
4.11 16.03.2022 SB2022031619
#VU61021 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23656
CWE-79 Low
No
No
4.10 04.03.2022 SB2022030410
#VU60898 - Improper Access Control
CVE-2021-3967
CWE-284 Medium
No
No
4.10 28.02.2022 SB2022022802
#VU60897 - Improper Access Control
CVE-2022-21706
CWE-284 Medium
No
No
4.10 28.02.2022 SB2022022802
#VU59991 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43799
CWE-94 High
Available
No
4.9 25.01.2022 SB2022012511


Showing elements 21 - 40 out of 66