Known vulnerabilities in Zulip Server - page 3

Vendor: Zulip
Software: Zulip Server
Software CPE: cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 61
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zulip Server Zulip Server is affected by 61 known vulnerabilities: 6 high, 25 medium, 30 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52318 - Improper Access Control
CVE-2021-30477
CWE-284 Medium
No
No
3.4 19.04.2021 SB2021041904
#VU52317 - Improper Access Control
CVE-2021-30478
CWE-284 Low
No
No
3.4 19.04.2021 SB2021041904
#VU46084 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-15070
CWE-74 High
No
No
2.1.7 21.08.2020 SB2020082625
#VU46085 - Improper Access Control
CVE-2020-14215
CWE-284 Medium
No
No
2.1.5 21.08.2020 SB2020082625
#VU46086 - Improper input validation
CVE-2020-14194
CWE-20 Medium
No
No
2.1.5 21.08.2020 SB2020082625
#VU46087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12759
CWE-79 Low
No
No
2.1.5 21.08.2020 SB2020082625
#VU28003 - Improper Access Control
CWE-284 High
No
No
1.5.2 19.05.2020 SB2020051909
#VU27393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-10935
CWE-79 Low
No
No
2.1.3 28.04.2020 SB2020042821
#VU27392 - Use of Web Link to Untrusted Target with window.opener Access
CVE-2020-9444
CWE-1022 Low
No
No
2.1.3 28.04.2020 SB2020042821
#VU27391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9445
CWE-79 Low
No
No
2.1.3 28.04.2020 SB2020042821
#VU30541 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-19775
CWE-601 Low
No
No
2.0.8 18.12.2019 SB2019121840
#VU30586 - Improper Authentication
CVE-2019-18933
CWE-287 High
No
No
2.0.7 22.11.2019 SB2019112224
#VU30742 - Resource exhaustion
CVE-2019-16215
CWE-400 Medium
No
No
2.0.5 18.09.2019 SB2019091813
#VU30743 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16216
CWE-79 Low
No
No
2.0.5 18.09.2019 SB2019091813
#VU14655 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-9999
CWE-79 Low
No
No
1.7.2 18.04.2018 SB2018041816
#VU14656 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-9990
CWE-79 Low
No
No
1.7.2 18.04.2018 SB2018041816
#VU14657 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-9987
CWE-79 Low
No
No
1.7.2 18.04.2018 SB2018041816
#VU14658 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-9986
CWE-79 Low
No
No
1.7.2 18.04.2018 SB2018041816
#VU31395 - Improper Authentication
CVE-2017-0910
CWE-287 High
No
No
1.7.1 27.11.2017 SB2017112714
#VU38928 - Missing Authorization
CVE-2017-0896
CWE-862 Medium
No
No
- 02.06.2017 SB2017060237


Showing elements 41 - 60 out of 61