Known vulnerabilities in Zulip Server - page 2

Vendor: Zulip
Software: Zulip Server
Software CPE: cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 61
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zulip Server Zulip Server is affected by 61 known vulnerabilities: 6 high, 25 medium, 30 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80017 - Improper Authorization
CVE-2023-32678
CWE-285 Medium
No
No
7.3 25.08.2023 SB2023082527
#VU76615 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33186
CWE-79 Low
No
No
7.0 beta3 30.05.2023 SB2023053011
#VU76394 - Improper Privilege Management
CVE-2023-32677
CWE-269 Low
No
No
6.2 20.05.2023 SB2023052002
#VU76393 - Improper Authorization
CVE-2023-28623
CWE-285 Medium
No
No
6.2 20.05.2023 SB2023052002
#VU72011 - Unrestricted Upload of File with Dangerous Type
CVE-2023-22735
CWE-434 Medium
No
No
- 07.02.2023 SB2023020750
#VU69404 - Information Exposure Through Timing Discrepancy
CVE-2022-41914
CWE-208 Medium
No
No
5.7 17.11.2022 SB2022111725
#VU141409 - Improper Access Control
CVE-2022-36048
CWE-284 Low
No
No
5.6 25.08.2022 SB2022082560
#VU65857 - Permissions, Privileges, and Access Controls
CVE-2022-31134
CWE-264 Medium
No
No
5.4 28.07.2022 SB2022072827
#VU65765 - Improper Authorization
CVE-2022-31168
CWE-285 Medium
No
No
5.5 25.07.2022 SB2022072545
#VU64584 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31017
CWE-200 Medium
No
No
5.3 22.06.2022 SB2022062226
#VU61421 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-24751
CWE-362 Medium
No
No
4.11 16.03.2022 SB2022031619
#VU61021 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23656
CWE-79 Low
No
No
4.10 04.03.2022 SB2022030410
#VU60898 - Improper Access Control
CVE-2021-3967
CWE-284 Medium
No
No
4.10 28.02.2022 SB2022022802
#VU60897 - Improper Access Control
CVE-2022-21706
CWE-284 Medium
No
No
4.10 28.02.2022 SB2022022802
#VU59991 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43799
CWE-94 High
Available
No
4.9 25.01.2022 SB2022012511
#VU58481 - Insufficient Session Expiration
CVE-2021-43791
CWE-613 Medium
No
No
4.8 02.12.2021 SB2021120203
#VU57054 - Improper input validation
CVE-2021-41115
CWE-20 Low
No
No
4.7 05.10.2021 SB2021100506
#VU55290 - Improper input validation
CWE-20 Medium
No
No
4.4 26.07.2021 SB2021072602
#VU52316 - Exposure of sensitive information to an unauthorized actor
CVE-2021-30479
CWE-200 Medium
No
No
3.4 19.04.2021 SB2021041904
#VU52314 - Improper Access Control
CVE-2021-30487
CWE-284 Low
No
No
3.4 19.04.2021 SB2021041904


Showing elements 21 - 40 out of 61