Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4773-1
HistoryMar 15, 2021 - 12:00 a.m.

Drupal vulnerabilities

2021-03-1500:00:00
ubuntu.com
78
drupal
ubuntu 16.04 esm
ubuntu 14.04 esm
drupal7
code execution
account access
open redirects

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.976

Percentile

100.0%

JSON

Releases

  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • drupal7 - fully-featured content management framework

Details

It was discovered that Drupal did not properly process certain input. An
attacker could use this vulnerability to execute arbitrary code or
completely compromise a Drupal site. (CVE-2018-7600, CVE-2018-7602)

It was discovered that password reset URLs in Drupal could be forged. An
attacker could use this vulnerability to gain access to another user’s
account. This issue affected only Ubuntu 14.04 ESM. (CVE-2015-2559)

It was discovered that Drupal did not properly protect against open
redirects. An attacker could use this vulnerability to send unsuspecting
users to 3rd party sites and potentially carry out phishing attacks.
This issue affected only Ubuntu 14.04 ESM. (CVE-2015-2749, CVE-2015-2750)

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchdrupal7< 7.44-1ubuntu1~16.04.0+esm1UNKNOWN
Ubuntu16.04noarchdrupal7< 7.44-1ubuntu1~16.04.0UNKNOWN
Ubuntu14.04noarchdrupal7< 7.26-1ubuntu0.1+esm1UNKNOWN
Ubuntu14.04noarchdrupal7< 7.26-1ubuntu0.1UNKNOWN

Related

osv 9
nessus 19
openvas 28
drupal 2
mageia 1
malwarebytes 1
impervablog 3
veracode 2
thn 5
prion 5
securityvulns 2
ubuntucve 5
nvd 5
archlinux 3
cve 5
cvelist 5
debian 7
debiancve 5
seebug 2
fedora 14
attackerkb 2
exploitdb 5
friendsofphp 4
f5 2
dsquare 3
threatpost 10
exploitpack 5
checkpoint_advisories 3
ibm 2
zdt 6
packetstorm 6
alpinelinux 2
cisa_kev 2
github 2
nuclei 2
qualysblog 3
hackerone 1
freebsd 1
saint 3
metasploit 1
wallarmlab 1
githubexploit 1
hivepro 1
avleonov 1
kitploit 1
securelist 1
osv
osv
drupal7 vulnerabilities
2021-03-15 20:17:24
drupal7 - security update
2018-04-26 00:00:00
Drupal Core Remote Code Execution Vulnerability
2024-04-23 22:36:09
nessus
nessus
Ubuntu 16.04 ESM : Drupal vulnerabilities (USN-4773-1)
2023-10-20 00:00:00
Debian DSA-3200-1 : drupal7 - security update
2015-03-23 00:00:00
Drupal 6.x < 6.35 / 7.x < 7.35 Multiple Vulnerabilities
2016-04-08 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4773-1)
2023-01-27 00:00:00
Debian: Security Advisory (DSA-3200-1)
2015-03-19 00:00:00
Mageia: Security Advisory (MGASA-2015-0121)
2022-01-28 00:00:00
drupal
drupal
Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2015-001
2015-03-18 00:00:00
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
2018-04-25 00:00:00
mageia
mageia
Updated drupal packages fix security vulnerabilities
2015-03-28 00:12:10
malwarebytes
malwarebytes
A look into Drupalgeddon’s client-side attacks
2018-05-18 15:00:00
impervablog
impervablog
The State of Web Application Vulnerabilities in 2018
2019-01-09 14:00:26
Drupalgeddon 2.0: Are Hackers Slacking Off?
2018-04-13 19:13:25
How Imperva’s New Attack Crowdsourcing Secures Your Business’s Applications
2019-02-13 12:52:46
veracode
veracode
Remote Code Execution (RCE)
2018-04-26 10:18:46
Remote Code Execution (RCE)
2018-04-03 05:03:22
thn
thn
Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack
2018-04-26 12:32:00
Third Critical Drupal Flaw Discovered—Patch Your Sites Immediately
2018-04-25 16:41:00
Hackers Have Started Exploiting Drupal RCE Exploit Released Yesterday
2018-04-14 08:29:00
prion
prion
Default credentials
2015-03-25 14:59:00
Open redirect
2017-09-13 16:29:00
Open redirect
2017-09-13 16:29:00
securityvulns
securityvulns
[SECURITY] [DSA 3200-1] drupal7 security update
2015-05-11 00:00:00
[ MDVSA-2015:181 ] drupal
2015-05-12 00:00:00
ubuntucve
ubuntucve
CVE-2015-2750
2017-09-13 00:00:00
CVE-2015-2559
2015-03-25 00:00:00
CVE-2015-2749
2017-09-13 00:00:00
nvd
nvd
CVE-2015-2750
2017-09-13 16:29:00
CVE-2015-2559
2015-03-25 14:59:05
CVE-2015-2749
2017-09-13 16:29:00
archlinux
archlinux
drupal: multiple issues
2015-03-20 00:00:00
[ASA-201804-10] drupal: arbitrary command execution
2018-04-27 00:00:00
[ASA-201804-1] drupal: arbitrary code execution
2018-04-01 00:00:00
cve
cve
CVE-2015-2559
2015-03-25 14:59:05
CVE-2015-2750
2017-09-13 16:29:00
CVE-2015-2749
2017-09-13 16:29:00
cvelist
cvelist
CVE-2015-2559
2015-03-25 14:00:00
CVE-2015-2749
2017-09-13 16:00:00
CVE-2015-2750
2017-09-13 16:00:00
debian
debian
[SECURITY] [DSA 3200-1] drupal7 security update
2015-03-20 22:34:30
[SECURITY] [DSA 4180-1] drupal7 security update
2018-04-25 20:13:52
[SECURITY] [DSA 4180-1] drupal7 security update
2018-04-25 20:13:52
debiancve
debiancve
CVE-2015-2559
2015-03-25 14:59:00
CVE-2015-2750
2017-09-13 16:29:00
CVE-2015-2749
2017-09-13 16:29:00
seebug
seebug
Drupal core Remote Code Execution(CVE-2018-7602)
2018-04-26 00:00:00
Drupal core Remote Code Execution(CVE-2018-7600) (Drupalgeddon2)
2018-03-30 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: drupal7-7.59-1.fc28
2018-05-05 20:37:11
[SECURITY] Fedora 27 Update: drupal7-7.59-1.fc27
2018-05-10 19:16:35
[SECURITY] Fedora 28 Update: drupal7-7.60-2.fc28
2018-12-03 01:39:08
attackerkb
attackerkb
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
2018-07-19 00:00:00
Drupalgeddon 2
2018-03-29 00:00:00
exploitdb
exploitdb
Drupal &lt; 7.58 - &#039;Drupalgeddon3&#039; (Authenticated) Remote Code (Metasploit)
2018-04-30 00:00:00
Drupal &lt; 7.58 - &#039;Drupalgeddon3&#039; (Authenticated) Remote Code Execution (PoC)
2018-04-25 00:00:00
Drupal &lt; 7.58 / &lt; 8.3.9 / &lt; 8.4.6 / &lt; 8.5.1 - &#039;Drupalgeddon2&#039; Remote Code Execution
2018-04-13 00:00:00
friendsofphp
friendsofphp
Critical - Remote Code Execution
1970-01-01 00:00:00
Critical - Remote Code Execution
1970-01-01 00:00:00
Highly critical - Remote Code Execution
2018-03-28 19:30:00
f5
f5
K59591931 : Drupal vulnerability CVE-2018-7602
2018-04-30 00:00:00
K22854260 : Drupal vulnerability CVE-2018-7600
2018-03-29 00:00:00
dsquare
dsquare
Drupal 7 SA-CORE-2018-004 RCE
2018-05-08 00:00:00
Drupal 7 SA-CORE-2018-002 RCE
2018-05-08 00:00:00
Drupal 8 SA-CORE-2018-002 RCE
2018-05-08 00:00:00
threatpost
threatpost
Ransomware Attack Hits Ukrainian Energy Ministry, Exploiting Drupalgeddon2
2018-04-24 18:34:37
Drupalgeddon 2.0 Still Haunting 115K+ Sites
2018-06-05 18:24:29
Drupal Issues Highly Critical Patch: Over 1M Sites Vulnerable
2018-03-29 15:58:28
exploitpack
exploitpack
Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code Execution (PoC)
2018-04-25 00:00:00
Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code (Metasploit)
2018-04-30 00:00:00
Drupal 8.3.9 8.4.6 8.5.1 - Drupalgeddon2 Remote Code Execution (Metasploit)
2018-04-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Drupal Core Remote Code Execution (CVE-2018-7602)
2018-04-26 00:00:00
Drupal Core Form Rendering Remote Code Execution (CVE-2018-7600)
2020-11-05 00:00:00
Drupal Core Remote Code Execution (CVE-2018-7600)
2018-03-29 00:00:00
ibm
ibm
Security Bulletin: API Connect Developer Portal is affected by a Drupal vulnerability (CVE-2018-7602)
2018-06-15 07:09:14
Security Bulletin: API Connect Developer Portal is affected by Drupal vulnerability (CVE-2018-7600)
2018-06-15 07:09:07
zdt
zdt
Drupal < 7.58 - Drupalgeddon3 Authenticated Remote Code Exploit
2018-05-01 00:00:00
Drupal < 7.58 - drupalgeddon3 Authenticated Remote Code Execution (PoC) Exploit
2018-04-26 00:00:00
Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - Drupalgeddon2 Remote Code Execution Exploit
2018-04-18 00:00:00
packetstorm
packetstorm
Drupal drupgeddon3 Remote Code Execution
2018-04-26 00:00:00
Drupalgeddon3 Remote Code Execution
2018-04-30 00:00:00
Drupalgeddon2 Drupal Remote Code Execution
2018-04-17 00:00:00
alpinelinux
alpinelinux
CVE-2018-7602
2018-07-19 17:29:00
CVE-2018-7600
2018-03-29 07:29:00
cisa_kev
cisa_kev
Drupal Core Remote Code Execution Vulnerability
2022-04-13 00:00:00
Drupal Core Remote Code Execution Vulnerability
2021-11-03 00:00:00
github
github
Drupal Core Remote Code Execution Vulnerability
2024-04-23 22:36:09
Drupal Core Remote Code Execution Vulnerability
2022-05-14 01:29:45
nuclei
nuclei
Drupal - Remote Code Execution
2022-02-04 19:09:58
Drupal - Remote Code Execution
2021-02-15 13:33:33
qualysblog
qualysblog
Staying Safe in the Era of Browser-based Cryptocurrency Mining
2018-07-25 17:00:02
Detecting Apache Struts 2 Namespace RCE: CVE-2018-11776
2018-08-23 20:27:19
Microsoft Misfires with Meltdown Patch, while WannaCry Pops Up at Boeing
2018-04-02 18:02:51
hackerone
hackerone
U.S. Dept Of Defense: [CVE-2018-7600] Remote Code Execution due to outdated Drupal server on www.█████████
2020-12-21 07:51:14
freebsd
freebsd
drupal -- Drupal Core - Multiple Vulnerabilities
2018-03-13 00:00:00
saint
saint
Drupal Form API command execution
2018-04-25 00:00:00
Drupal Form API command execution
2018-04-25 00:00:00
Drupal Form API command execution
2018-04-25 00:00:00
metasploit
metasploit
Drupal Drupalgeddon 2 Forms API Property Injection
2018-04-18 00:05:45
wallarmlab
wallarmlab
Drupalgeddon Two.
2018-04-20 19:31:22
githubexploit
githubexploit
Exploit for Improper Input Validation in Drupal
2020-08-31 22:55:18
hivepro
hivepro
Muhstik botnet adds another vulnerability exploit to its arsenal
2022-03-29 12:17:03
avleonov
avleonov
Vulnerability Databases: Classification and Registry
2018-06-05 15:57:41
kitploit
kitploit
Darksplitz - Exploit Framework
2019-04-04 21:12:00
securelist
securelist
Incident Response Analyst Report 2019
2020-08-06 10:00:34

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.976

Percentile

100.0%

JSON
Related for USN-4773-1
osv9nessus19openvas28drupal2mageia1malwarebytes1impervablog3veracode2thn5prion5securityvulns2ubuntucve5nvd5archlinux3cve5cvelist5debian7debiancve5seebug2fedora14attackerkb2exploitdb5friendsofphp4f52dsquare3threatpost10exploitpack5checkpoint_advisories3ibm2zdt6packetstorm6alpinelinux2cisa_kev2github2nuclei2qualysblog3hackerone1freebsd1saint3metasploit1wallarmlab1githubexploit1hivepro1avleonov1kitploit1securelist1