Mozilla Bugzilla Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

2.17.1	48
2.14	38
2.14.1	36
2.16	32
2.10	28

Remediation

Official Fix	108
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	30

Exploitability

High	4
Functional	0
Proof-of-Concept	40
Unproven	6
Not Defined	88

Access Vector

Not Defined	0
Physical	0
Local	12
Adjacent	2
Network	124

Authentication

Not Defined	0
High	2
Low	8
None	128

User Interaction

Not Defined	0
Required	44
None	94

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	14
≤5	36
≤6	36
≤7	10
≤8	38
≤9	0
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	24
≤5	44
≤6	28
≤7	32
≤8	6
≤9	0
≤10	4

VulDB

≤1	0
≤2	0
≤3	0
≤4	14
≤5	36
≤6	36
≤7	10
≤8	38
≤9	0
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	2
<10k	48
<25k	88
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	112
<2k	4
<5k	16
<10k	6
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (169): 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10, 2.11, 2.12, 2.13, 2.14, 2.14.1, 2.14.2, 2.14.3, 2.14.4, 2.14.5, 2.15, 2.16, 2.16.1, 2.16.2, 2.16.3, 2.16.4, 2.16.5, 2.16.6, 2.16.7, 2.16.8, 2.16.9, 2.16.11, 2.17, 2.17.1, 2.17.2, 2.17.3, 2.17.4, 2.17.5, 2.17.6, 2.17.7, 2.18, 2.18.1, 2.18.2, 2.18.3, 2.18.4, 2.18.5, 2.19, 2.19.1, 2.19.2, 2.19.3, 2.20, 2.20.1, 2.20.2, 2.20.3, 2.20.4, 2.21, 2.21.1, 2.21.2, 2.22, 2.22.1, 2.22.2, 2.22.3, 2.22.4, 2.23, 2.23.1, 2.23.2, 2.23.3, 2.23.4, 3, 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.4, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.5, 3.5.1, 3.5.2, 3.5.3, 3.6, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.6.6, 3.6.7, 3.6.8, 3.6.9, 3.7, 3.7.1, 3.7.2, 3.7.3, 4, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.11, 4.0.12, 4.0.13, 4.1, 4.1.1, 4.1.2, 4.1.3, 4.2, 4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.2.5, 4.2.6, 4.2.7, 4.2.8, 4.2.9, 4.2.11, 4.2.12, 4.2.13, 4.2.14, 4.3, 4.3.1, 4.3.2, 4.3.3, 4.4, 4.4.1, 4.4.2, 4.4.3, 4.4.4, 4.4.5, 4.4.6, 4.4.7, 4.4.8, 4.4.9, 4.4rc1, 4.5, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 5.0

Link to Product Website: https://www.mozilla.org/

Software Type: Bug Tracking Software

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CTI	CVE
09/10/2015	7.3	6.4	Mozilla Bugzilla Email Address Util.pm input validation	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2015-4499
02/01/2015	6.3	6.0	Mozilla Bugzilla command injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2014-8630
10/06/2014	4.3	4.1	Mozilla Bugzilla cross site scripting	$5k-$25k	$0-$5k	High	Official Fix	0.02	CVE-2014-1573
10/06/2014	5.3	4.6	Mozilla Bugzilla Account Creation access control	$5k-$25k	$0-$5k	Unproven	Official Fix	0.03	CVE-2014-1572
10/06/2014	5.3	4.6	Mozilla Bugzilla Comment information disclosure	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2014-1571
07/24/2014	4.3	4.1	Mozilla Bugzilla JSONP Endpoint cross-site request forgery	$5k-$25k	$0-$5k	High	Official Fix	0.02	CVE-2014-1546
04/18/2014	5.3	4.8	Mozilla Bugzilla Data Display improper authentication	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2014-1517
10/17/2013	4.3	3.9	Mozilla Bugzilla cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2013-1743
10/17/2013	6.3	5.7	Mozilla Bugzilla editflagtypes.cgi cross site scripting	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2013-1742
10/17/2013	5.4	4.9	Mozilla Bugzilla CSRF Token process_bug.cgi cross-site request forgery	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2013-1733
10/17/2013	5.4	4.9	Mozilla Bugzilla CSRF Token attachment.cgi cross-site request forgery	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2013-1734
02/24/2013	4.3	4.1	Mozilla Bugzilla Error Message build_subselect information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2013-0786
11/16/2012	4.3	4.3	Mozilla Bugzilla swfstore.swf cross site scripting	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2012-5883
09/04/2012	5.3	5.3	Mozilla Bugzilla access control	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2012-4747
08/30/2012	6.5	5.9	Mozilla Bugzilla Username Parser search credentials management	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2012-3981
08/30/2012	4.3	3.9	Mozilla Bugzilla Extension Directory Browser credentials management	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2012-3981
07/26/2012	5.3	4.8	Mozilla Bugzilla access control	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2012-1969
07/26/2012	5.3	4.8	Mozilla Bugzilla access control	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2012-1968
04/13/2012	5.9	5.3	Mozilla Bugzilla JavaScript Template buglist.cgi access control	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2012-0466
02/24/2012	6.3	6.3	Mozilla Bugzilla mod_perl xmlrpc.cgi cross-site request forgery	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2012-0453
02/18/2012	7.5	6.7	Mozilla Bugzilla X-Forwarded-For Header access control	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2012-0465
02/02/2012	4.3	4.1	Mozilla Bugzilla User Account input validation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2012-0448
02/02/2012	6.3	6.0	Mozilla Bugzilla jsonrpc.cgi cross-site request forgery	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2012-0440
01/02/2012	6.3	6.0	Mozilla Bugzilla attachment.cgi cross-site request forgery	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2011-3669
01/02/2012	6.3	6.0	Mozilla Bugzilla post_bug.cgi cross-site request forgery	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2011-3668

113 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 113 results.

more entries by Mozilla

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!