Known vulnerabilities in Zulip Server - page 3

Vendor: Zulip
Software: Zulip Server
Software CPE: cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zulip Server Zulip Server is affected by 66 known vulnerabilities: 6 high, 26 medium, 34 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58481 - Insufficient Session Expiration
CVE-2021-43791
CWE-613 Medium
No
No
4.8 02.12.2021 SB2021120203
#VU57054 - Improper input validation
CVE-2021-41115
CWE-20 Low
No
No
4.7 05.10.2021 SB2021100506
#VU55290 - Improper input validation
CWE-20 Medium
No
No
4.4 26.07.2021 SB2021072602
#VU52318 - Improper Access Control
CVE-2021-30477
CWE-284 Medium
No
No
3.4 19.04.2021 SB2021041904
#VU52317 - Improper Access Control
CVE-2021-30478
CWE-284 Low
No
No
3.4 19.04.2021 SB2021041904
#VU52316 - Exposure of sensitive information to an unauthorized actor
CVE-2021-30479
CWE-200 Medium
No
No
3.4 19.04.2021 SB2021041904
#VU52314 - Improper Access Control
CVE-2021-30487
CWE-284 Low
No
No
3.4 19.04.2021 SB2021041904
#VU46084 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-15070
CWE-74 High
No
No
2.1.7 21.08.2020 SB2020082625
#VU46085 - Improper Access Control
CVE-2020-14215
CWE-284 Medium
No
No
2.1.5 21.08.2020 SB2020082625
#VU46086 - Improper input validation
CVE-2020-14194
CWE-20 Medium
No
No
2.1.5 21.08.2020 SB2020082625
#VU46087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12759
CWE-79 Low
No
No
2.1.5 21.08.2020 SB2020082625
#VU28003 - Improper Access Control
CWE-284 High
No
No
1.5.2 19.05.2020 SB2020051909
#VU27393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-10935
CWE-79 Low
No
No
2.1.3 28.04.2020 SB2020042821
#VU27392 - Use of Web Link to Untrusted Target with window.opener Access
CVE-2020-9444
CWE-1022 Low
No
No
2.1.3 28.04.2020 SB2020042821
#VU27391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9445
CWE-79 Low
No
No
2.1.3 28.04.2020 SB2020042821
#VU30541 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-19775
CWE-601 Low
No
No
2.0.8 18.12.2019 SB2019121840
#VU30586 - Improper Authentication
CVE-2019-18933
CWE-287 High
No
No
2.0.7 22.11.2019 SB2019112224
#VU30742 - Resource exhaustion
CVE-2019-16215
CWE-400 Medium
No
No
2.0.5 18.09.2019 SB2019091813
#VU30743 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16216
CWE-79 Low
No
No
2.0.5 18.09.2019 SB2019091813
#VU14657 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-9987
CWE-79 Low
No
No
1.7.2 18.04.2018 SB2018041816


Showing elements 41 - 60 out of 66