How many b3log symphony CVEs are in CISA KEV?

None of b3log symphony's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of b3log symphony are affected?

10 distinct b3log symphony versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in b3log symphony CVEs?

b3log symphony's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-862 (Missing Authorization).

How many critical b3log symphony vulnerabilities are there?

b3log symphony has 2 critical and 0 high-severity CVEs.

What is the average severity of b3log symphony CVEs?

The average CVSS base score across b3log symphony's scored CVEs is 7.0.

b3log symphony Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: b3log symphony vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

b3log symphony Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

b3log symphony has 7 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

Severity and exploitation

How the CVSS severity of b3log symphony's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High0

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of b3log symphony's CVEs are currently listed in CISA's KEV catalog.

Public exploits

5 of b3log symphony's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every b3log symphony version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.3.01 CVE
< 3.4.71 CVE
< 3.6.01 CVE
<= 3.6.31 CVE
<= 3.6.41 CVE
2.2.0 <= v <= 2.2.01 CVE
2.6.0 <= v <= 2.6.01 CVE

Fixed in

3.3.01 CVE
3.4.71 CVE
3.6.01 CVE

Find a version

7 CVEs

Sort

B3log Symphony through 3.6.4 Missing Authorization in Admin Console Routes
CVE-2026-110105CWE-862
Medium · CVSS 6.9
EPSS 0.3% (21th pct)2026-10-13
Critical vulnerability · 2024-02-05
CVE-2024-23049
Public exploit
CWE-77
Critical · CVSS 9.8
EPSS 1.2% (67th pct)2024-02-05
Medium vulnerability · 2019-10-10
CVE-2019-17488
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.8% (56th pct)2019-10-10
Medium vulnerability · 2019-06-20
CVE-2018-16249
Public exploit
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.5% (43th pct)2019-06-20
Moderate severity vulnerability that affects org.b3log:symphony
CVE-2019-9142
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.8% (56th pct)2019-02-25
Critical vulnerability · 2018-04-27
CVE-2018-10469
Public exploit
CWE-434
Critical · CVSS 9.8
EPSS 2.1% (81th pct)2018-04-27
Medium vulnerability · 2017-11-15
CVE-2017-16821
Public exploit
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (40th pct)2017-11-15

Common weakness types

The CWE weakness categories most often found in b3log symphony CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many b3log symphony CVEs were published each year.

2017

2018

2019

2024

2026

Other b3log products

Browse vulnerabilities for other products by b3log.

siyuan193 CVEs vditor6 CVEs solo3 CVEs github.com/b3log/wide1 CVEs org.b3log:symphony1 CVEs wide1 CVEs

All b3log vulnerabilities

Frequently asked questions

Common questions about b3log symphony vulnerabilities.

How many CVEs does b3log symphony have?: b3log symphony has 7 published CVE records since 2017.
How many b3log symphony CVEs are in CISA KEV?: None of b3log symphony's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for b3log symphony vulnerabilities?: Yes — 5 of b3log symphony's CVEs have a known public exploit.
Which versions of b3log symphony are affected?: 10 distinct b3log symphony versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in b3log symphony CVEs?: b3log symphony's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-862 (Missing Authorization).
How many critical b3log symphony vulnerabilities are there?: b3log symphony has 2 critical and 0 high-severity CVEs.
What is the average severity of b3log symphony CVEs?: The average CVSS base score across b3log symphony's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track b3log symphony vulnerabilities

Get an alert for each new b3log symphony CVE, with AI-written analysis and remediation steps.

Create an account See pricing