Drupal Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Content Management System	150
Photo Gallery Software	4
Project Management Software	4

Product

Drupal CMS	10
Drupal EveryBlog	6
Drupal Content Construction Kit	6
Drupal Imce Module	4
Drupal Print	4

Remediation

Official Fix	136
Temporary Fix	0
Workaround	0
Unavailable	12
Not Defined	10

Exploitability

High	62
Functional	0
Proof-of-Concept	46
Unproven	16
Not Defined	34

Access Vector

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	158

Authentication

Not Defined	0
High	0
Low	64
None	94

User Interaction

Not Defined	0
Required	90
None	68

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	42
≤5	46
≤6	14
≤7	20
≤8	30
≤9	0
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	60
≤5	38
≤6	24
≤7	28
≤8	2
≤9	4
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	42
≤5	44
≤6	12
≤7	24
≤8	30
≤9	0
≤10	6

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	4
≤8	2
≤9	0
≤10	0

CNA

≤1	4
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	98
<5k	60
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	158
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (114): Acidfree (1), Administrator (1), Aggregation module (3), Ajax Checklist (2), Archive Module (1), Atom Module (1), BUEditor (1), Bibliography Module (2), BlueMasters (1), Brilliant Gallery (2), CCK comment reference (1), CMS (6), Chatroom Module (2), Comment Mail (1), Comment Upload Module (1), Commons (1), Content Construction Kit (3), Context Form Alteration module (1), Counter module (1), Custom Search module (2), Cvs Management And Tracker (1), Database Administration Module (2), Devel module (1), Doubleclick for Publishers (1), Drupal Pathauto Module (1), Drupal Project Issue Tracking (2), Drupal Pubcookie Module (1), E-Commerce Module (1), E-Publish (2), Easylinks Module (2), Entity API module (1), EveryBlog (4), Extended Tracker (1), FAQ (1), Feature Module (1), Feedapi Mapper (1), Fileshare module (1), Form Mail Module (1), Forward module (1), Header Image (1), Help Tip module (2), Imce Module (2), Internationalization (2), Job Search (1), Link module (1), Link to Us (1), Localization client (2), Localizer (1), LoginToboggan module (2), MAYO (1), Maestro (1), Magic Tabs module (1), Mailhandler (1), Mailsave (1), Mediafield Module (1), Meta Tags Module (1), Modal Frame (1), MySite (1), NewsFlash (1), News Page (1), Nivo Slider (1), Node Clone (1), Node Hierarchy module (1), Nodeaccess Userreference (1), Nodefamily (1), Nodequeue (1), OpenID (1), Organic Groups Menu (1), Organic Groups Module (2), Outline Designer module (1), Paypal Node Module (1), Petition Node module (1), Plus1 (1), Print (5), Print module (1), Professional theme (1), Project (1), Project Issue File Review (1), Project Issue Tracking Module (3), Project Issue Tracking module (2), Project issue tracking module (1), Protected Node module (1), Quiz (1), Randomizer (1), Search Keyword Module (1), Secure Site Module (2), Semantically Interconnected Online Communities (1), Services Module For Drupal (1), Shindig-Integrator (3), Shoutbox (1), SimpleCorp (1), Site Profile Directory Module (1), Skeleton theme (1), Stock Module (1), Suggested Terms module (1), Talk (2), Tasklist (1), Taxonomy Autotagger module (2), Taxonomy Image module (1), Taxonomy Theme module (1), Taxonomy manager (1), Tinytax Taxonomy Block Module (1), TrailScout module (2), Tribune (1), Ubercart Module (3), User Karma module (2), Userpoints Module (1), Userreview module (1), Views (2), Views Bulk Operations (1), Webform Module (1), Workflow (1), Zen (1), linkchecker (1)

Link to Vendor Website: https://www.drupal.org/

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	CTI	EPSS	CVE
04/10/2018	5.4	5.1	Drupal Entity API module Access Restriction access control	Content Management System	Not Defined	Official Fix	0.04	0.01232	CVE-2014-1400
08/16/2017	8.0	7.7	Drupal CMS access control	Content Management System	Not Defined	Official Fix	0.04	0.00954	CVE-2017-6925
08/16/2017	4.6	4.5	Drupal CMS REST API privileges management	Content Management System	Not Defined	Official Fix	0.05	0.00954	CVE-2017-6924
08/16/2017	4.3	4.2	Drupal CMS Ajax Endpoint authorization	Content Management System	Not Defined	Official Fix	0.01	0.00890	CVE-2017-6923
04/21/2015	4.3	4.1	Drupal Administrator cross-site request forgery	Content Management System	Not Defined	Official Fix	0.08	0.01213	CVE-2015-3351
11/12/2014	4.3	4.1	Drupal Organic Groups Menu Administration Page access control	Content Management System	Not Defined	Official Fix	0.00	0.01061	CVE-2014-8734
10/16/2014	4.3	4.0	Drupal Modal Frame cross site scripting	Content Management System	High	Official Fix	0.00	0.01213	CVE-2014-8296
10/14/2014	4.3	4.1	Drupal Project Issue File Review cross site scripting	Feedback Software	Not Defined	Official Fix	0.04	0.01213	CVE-2014-8765
10/13/2014	3.5	3.4	Drupal Doubleclick for Publishers cross site scripting	Content Management System	Not Defined	Official Fix	0.04	0.01132	CVE-2014-8748
10/13/2014	4.3	4.1	Drupal Commons Commons Module cross site scripting	Content Management System	Not Defined	Official Fix	0.00	0.01319	CVE-2014-8747
10/13/2014	3.5	3.4	Drupal Skeleton theme cross site scripting	Content Management System	High	Official Fix	0.03	0.01132	CVE-2014-8746
10/13/2014	3.5	3.4	Drupal Custom Search module Search Module cross site scripting	Content Management System	High	Official Fix	0.00	0.01232	CVE-2014-8745
10/13/2014	3.5	3.4	Drupal Nivo Slider cross site scripting	Content Management System	High	Official Fix	0.04	0.01132	CVE-2014-8744
10/13/2014	3.5	3.4	Drupal Maestro cross site scripting	Content Management System	Not Defined	Official Fix	0.03	0.01132	CVE-2014-8743
10/09/2014	3.5	3.4	Drupal MAYO MAYO Theme cross site scripting	Content Management System	Not Defined	Official Fix	0.00	0.01232	CVE-2014-8079
10/09/2014	3.5	3.4	Drupal Print cross site scripting	Content Management System	Not Defined	Official Fix	0.00	0.01232	CVE-2014-8078
10/09/2014	3.5	3.4	Drupal NewsFlash cross site scripting	Content Management System	Not Defined	Official Fix	0.04	0.01232	CVE-2014-8077
10/09/2014	3.5	3.4	Drupal Professional theme cross site scripting	Content Management System	High	Official Fix	0.00	0.01132	CVE-2014-8076
10/09/2014	3.5	3.5	Drupal Tribune cross site scripting	Content Management System	Not Defined	Not Defined	0.05	0.01132	CVE-2014-8075
10/08/2014	3.5	3.4	Drupal Zen template.php cross site scripting	Content Management System	Not Defined	Official Fix	0.00	0.01132	CVE-2014-7980
10/08/2014	3.5	3.4	Drupal SimpleCorp cross site scripting	Content Management System	Not Defined	Official Fix	0.00	0.01132	CVE-2014-7979
10/08/2014	3.5	3.4	Drupal BlueMasters cross site scripting	Content Management System	Not Defined	Official Fix	0.06	0.01132	CVE-2014-7978
10/06/2014	3.5	3.4	Drupal Custom Search module Search Module cross site scripting	Content Management System	Not Defined	Official Fix	0.05	0.01132	CVE-2014-7870
10/06/2014	3.5	3.4	Drupal Context Form Alteration module cross site scripting	Content Management System	Not Defined	Official Fix	0.00	0.01132	CVE-2014-7869
09/25/2012	4.3	4.1	Drupal FAQ cross site scripting	Content Management System	Not Defined	Official Fix	0.01	0.01955	CVE-2012-1646

133 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 133 results.

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!