Known vulnerabilities in Zulip Server - page 4
Vendor:
Zulip
Software:
Zulip Server
Software CPE:
cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*
Website:
https://zulipchat.com
Total vulnerabilities:
66
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
12.3
12.2
12.1
12.0
11.6
11.5
11.4
11.3
11.2
11.1
11.0
10.4
10.3
10.2
10.1
10.0
9.4
9.3
9.2
9.1
8.5
9.0
8.4
8.3
8.2
8.1
8.0
7.5
7.4
7.3
7.2
7.1
7.0
7.0-beta3
7.0-beta2
7.0-beta1
6.2
6.1
6.0
5.7
5.6
5.5
5.4
5.3
5.2
5.1
5.0
4.11
4.10
4.9
4.8
4.7
4.6
2.1.8
4.5
4.4
4.3
4.2
4.0
4.1
3.4
3.3
3.2
3.1
3.0
2.1.7
2.1.5
2.1.6
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.9.2
1.9.1
1.9.0
1.9.0-rc2
1.9.0-rc1
1.8.1
1.8.0-rc1
1.8.0
1.7.2
1.7.1
1.7.0
1.6.0
1.5.2
1.5.1
1.5.0
1.4.3
1.4.2
1.4.1
1.4.0
1.3.13
1.3.12
1.3.11
1.3.10
1.3.9
1.3.8
1.3.7
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.1
1.2.0+p1
1.2.0
1.1.5
Vulnerabilities (66)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU65858 - Improper Access Control CVE-2017-0881 |
CWE-284 | Low | 1.4.3 | 28.07.2022 |
SB2017032820 |
||
| #VU14655 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-9999 |
CWE-79 | Low | 1.7.2 | 18.04.2018 |
SB2018041816 |
||
| #VU14656 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-9990 |
CWE-79 | Low | 1.7.2 | 18.04.2018 |
SB2018041816 |
||
| #VU14658 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-9986 |
CWE-79 | Low | 1.7.2 | 18.04.2018 |
SB2018041816 |
||
| #VU31395 - Improper Authentication CVE-2017-0910 |
CWE-287 | High | 1.7.1 | 27.11.2017 |
SB2017112714 |
||
| #VU38928 - Missing Authorization CVE-2017-0896 |
CWE-862 | Medium | - | 02.06.2017 |
SB2017060237 |
Showing elements 61 - 80 out of 66