How many Drupal drupal/drupal CVEs are in CISA KEV?

Yes — 4 of Drupal drupal/drupal's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Drupal drupal/drupal are affected?

141 distinct Drupal drupal/drupal versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Drupal drupal/drupal CVEs?

Drupal drupal/drupal's CVEs most often map to these CWE weakness types: CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-209 (Generation of Error Message Containing Sensitive Information), CWE-434 (Unrestricted Upload of File with Dangerous Type).

How many critical Drupal drupal/drupal vulnerabilities are there?

Drupal drupal/drupal has 8 critical and 26 high-severity CVEs.

What is the average severity of Drupal drupal/drupal CVEs?

The average CVSS base score across Drupal drupal/drupal's scored CVEs is 6.9.

Drupal drupal/drupal Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Drupal drupal/drupal vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Drupal drupal/drupal Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Drupal drupal/drupal has 68 published CVE records since 2008, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Drupal drupal/drupal, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Drupal drupal/drupal's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical8

High26

Medium32

Low2

In CISA’s Known Exploited Vulnerabilities catalog

4 of Drupal drupal/drupal's CVEs are confirmed exploited in the wild.

Public exploits

5 of Drupal drupal/drupal's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Drupal drupal/drupal version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

6.0 <= v < 6.388 CVEs
7.0 <= v < 7.436 CVEs
10.3.0 <= v < 10.3.95 CVEs
7.0 <= v < 7.575 CVEs
8.9.0 <= v < 8.9.65 CVEs
9.0.0 <= v < 9.0.65 CVEs
11.0.0 <= v < 11.0.84 CVEs
8.4.0 <= v < 8.4.54 CVEs
8.8.0 <= v < 10.2.114 CVEs
7.0.0 <= v < 7.62.03 CVEs
8.0 <= v < 8.0.43 CVEs

Common weakness types

The CWE weakness categories most often found in Drupal drupal/drupal CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Drupal drupal/drupal CVEs were published each year.

2008

2010

2012

2013

2016

2017

2018

Other Drupal products

Browse vulnerabilities for other products by Drupal.

drupal739 CVEs drupal/core117 CVEs Drupal core57 CVEs core25 CVEs ai8 CVEs AI (Artificial Intelligence)8 CVEs drupal/ai8 CVEs Open Social8 CVEs

All Drupal vulnerabilities

Frequently asked questions

Common questions about Drupal drupal/drupal vulnerabilities.

How many CVEs does Drupal drupal/drupal have?: Drupal drupal/drupal has 68 published CVE records since 2008.
How many Drupal drupal/drupal CVEs are in CISA KEV?: Yes — 4 of Drupal drupal/drupal's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Drupal drupal/drupal vulnerabilities?: Yes — 5 of Drupal drupal/drupal's CVEs have a known public exploit.
Which versions of Drupal drupal/drupal are affected?: 141 distinct Drupal drupal/drupal versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Drupal drupal/drupal CVEs?: Drupal drupal/drupal's CVEs most often map to these CWE weakness types: CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-209 (Generation of Error Message Containing Sensitive Information), CWE-434 (Unrestricted Upload of File with Dangerous Type).
How many critical Drupal drupal/drupal vulnerabilities are there?: Drupal drupal/drupal has 8 critical and 26 high-severity CVEs.
What is the average severity of Drupal drupal/drupal CVEs?: The average CVSS base score across Drupal drupal/drupal's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Drupal drupal/drupal vulnerabilities

Monitor new Drupal drupal/drupal vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing