How many CVEs does mozilla bugzilla have?

mozilla bugzilla has 151 published CVE records since 2000.

How many mozilla bugzilla CVEs are in CISA KEV?

None of mozilla bugzilla's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for mozilla bugzilla vulnerabilities?

Yes — 35 of mozilla bugzilla's CVEs have a known public exploit.

Which versions of mozilla bugzilla are affected?

223 distinct mozilla bugzilla versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in mozilla bugzilla CVEs?

mozilla bugzilla's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-264, CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

How many critical mozilla bugzilla vulnerabilities are there?

mozilla bugzilla has 4 critical and 36 high-severity CVEs.

What is the average severity of mozilla bugzilla CVEs?

The average CVSS base score across mozilla bugzilla's scored CVEs is 5.4.

mozilla bugzilla Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every mozilla bugzilla version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

2.14 <= v <= 2.1474 CVEs
2.16 <= v <= 2.1671 CVEs
2.14.1 <= v <= 2.14.167 CVEs
2.17.1 <= v <= 2.17.163 CVEs
2.17.3 <= v <= 2.17.362 CVEs
2.17.4 <= v <= 2.17.462 CVEs
2.10 <= v <= 2.1060 CVEs
2.16.1 <= v <= 2.16.160 CVEs
2.8 <= v <= 2.860 CVEs
2.12 <= v <= 2.1259 CVEs
2.4 <= v <= 2.459 CVEs
2.6 <= v <= 2.659 CVEs
2.14.2 <= v <= 2.14.258 CVEs
2.14.3 <= v <= 2.14.358 CVEs
2.16.2 <= v <= 2.16.258 CVEs
2.17.5 <= v <= 2.17.557 CVEs
2.17.6 <= v <= 2.17.657 CVEs
2.17.7 <= v <= 2.17.757 CVEs
2.14.4 <= v <= 2.14.456 CVEs
2.16.3 <= v <= 2.16.356 CVEs
2.18 <= v <= 2.1855 CVEs
2.14.5 <= v <= 2.14.553 CVEs
2.20 <= v <= 2.2052 CVEs
2.16.4 <= v <= 2.16.451 CVEs
2.16.5 <= v <= 2.16.551 CVEs
2.17 <= v <= 2.1751 CVEs
2.18.1 <= v <= 2.18.150 CVEs
2.19.1 <= v <= 2.19.148 CVEs
2.19.2 <= v <= 2.19.248 CVEs
2.22 <= v <= 2.2248 CVEs
2.18.2 <= v <= 2.18.247 CVEs
2.18.3 <= v <= 2.18.347 CVEs
2.20.1 <= v <= 2.20.147 CVEs
2.20.2 <= v <= 2.20.247 CVEs
2.22.1 <= v <= 2.22.147 CVEs
3.2 <= v <= 3.247 CVEs
2.18.4 <= v <= 2.18.446 CVEs
2.19.3 <= v <= 2.19.346 CVEs
2.20.3 <= v <= 2.20.345 CVEs
3.0.1 <= v <= 3.0.145 CVEs
3.0.2 <= v <= 3.0.245 CVEs
2.18.5 <= v <= 2.18.544 CVEs
2.22.3 <= v <= 2.22.344 CVEs
2.22.4 <= v <= 2.22.444 CVEs
3.4.1 <= v <= 3.4.144 CVEs
2.20.4 <= v <= 2.20.443 CVEs
2.21 <= v <= 2.2143 CVEs
2.21.1 <= v <= 2.21.143 CVEs
2.22.2 <= v <= 2.22.243 CVEs
2.16.10 <= v <= 2.16.1042 CVEs
2.19 <= v <= 2.1942 CVEs
3.0.0 <= v <= 3.0.042 CVEs
3.0.3 <= v <= 3.0.342 CVEs
3.0.4 <= v <= 3.0.442 CVEs
3.2.2 <= v <= 3.2.242 CVEs
3.6.1 <= v <= 3.6.142 CVEs
2.20.5 <= v <= 2.20.541 CVEs
2.20.6 <= v <= 2.20.641 CVEs
2.22.5 <= v <= 2.22.541 CVEs
2.22.6 <= v <= 2.22.641 CVEs
3.0.5 <= v <= 3.0.541 CVEs
3.0.6 <= v <= 3.0.641 CVEs
3.2.3 <= v <= 3.2.341 CVEs
3.2.4 <= v <= 3.2.441 CVEs
3.4.2 <= v <= 3.4.241 CVEs
2.16.6 <= v <= 2.16.640 CVEs
2.16.7 <= v <= 2.16.740 CVEs
2.16.8 <= v <= 2.16.840 CVEs
2.16.9 <= v <= 2.16.940 CVEs
2.18.6 <= v <= 2.18.640 CVEs
3.2.1 <= v <= 3.2.140 CVEs
3.2.5 <= v <= 3.2.540 CVEs
3.4.3 <= v <= 3.4.340 CVEs
2.21.2 <= v <= 2.21.239 CVEs
3.2.6 <= v <= 3.2.639 CVEs
3.3.1 <= v <= 3.3.139 CVEs
3.7.1 <= v <= 3.7.139 CVEs
2.16.11 <= v <= 2.16.1138 CVEs
2.23.2 <= v <= 2.23.238 CVEs
3.2.7 <= v <= 3.2.738 CVEs
3.4.4 <= v <= 3.4.438 CVEs
3.4.5 <= v <= 3.4.538 CVEs
3.4.6 <= v <= 3.4.638 CVEs
3.6.2 <= v <= 3.6.238 CVEs
3.7.2 <= v <= 3.7.238 CVEs
4.0 <= v <= 4.038 CVEs
2.23.1 <= v <= 2.23.137 CVEs
2.23.3 <= v <= 2.23.337 CVEs
3.0.7 <= v <= 3.0.737 CVEs
3.4.7 <= v <= 3.4.737 CVEs
3.6 <= v <= 3.637 CVEs
3.7 <= v <= 3.737 CVEs
2.22.7 <= v <= 2.22.736 CVEs
2.23 <= v <= 2.2336 CVEs
2.23.4 <= v <= 2.23.436 CVEs
3.1.1 <= v <= 3.1.136 CVEs
3.3.2 <= v <= 3.3.236 CVEs
3.5.1 <= v <= 3.5.136 CVEs
3.6.3 <= v <= 3.6.336 CVEs
4.1.1 <= v <= 4.1.136 CVEs
4.1.2 <= v <= 4.1.236 CVEs
2.20.7 <= v <= 2.20.735 CVEs
3.0 <= v <= 3.035 CVEs
3.0.8 <= v <= 3.0.835 CVEs
3.1.2 <= v <= 3.1.235 CVEs
3.1.3 <= v <= 3.1.335 CVEs
3.3.3 <= v <= 3.3.335 CVEs
3.4 <= v <= 3.435 CVEs
3.5.2 <= v <= 3.5.235 CVEs
3.7.3 <= v <= 3.7.335 CVEs
4.1 <= v <= 4.135 CVEs
2.9 <= v <= 2.934 CVEs
3.0.9 <= v <= 3.0.934 CVEs
3.3.4 <= v <= 3.3.434 CVEs
3.4.8 <= v <= 3.4.834 CVEs
3.6.0 <= v <= 3.6.034 CVEs
3.0.10 <= v <= 3.0.1033 CVEs
3.0.11 <= v <= 3.0.1133 CVEs
3.2.8 <= v <= 3.2.833 CVEs
3.5.3 <= v <= 3.5.333 CVEs
3.1.0 <= v <= 3.1.032 CVEs
3.4.9 <= v <= 3.4.932 CVEs
4.0.1 <= v <= 4.0.132 CVEs
2.17.2 <= v <= 2.17.231 CVEs
3.6.4 <= v <= 3.6.431 CVEs
3.6.5 <= v <= 3.6.531 CVEs
2.18.7 <= v <= 2.18.730 CVEs
2.18.8 <= v <= 2.18.830 CVEs
2.18.9 <= v <= 2.18.930 CVEs
2.2 <= v <= 2.230 CVEs
3.1.4 <= v <= 3.1.430 CVEs
4.1.3 <= v <= 4.1.330 CVEs
2.18.6+ <= v <= 2.18.6+28 CVEs
3.2.9 <= v <= 3.2.928 CVEs
3.5 <= v <= 3.528 CVEs
4.2 <= v <= 4.228 CVEs
3.2.10 <= v <= 3.2.1027 CVEs
3.4.10 <= v <= 3.4.1027 CVEs
3.4.11 <= v <= 3.4.1127 CVEs
2.0 <= v <= 2.026 CVEs
3.6.6 <= v <= 3.6.626 CVEs
3.6.7 <= v <= 3.6.726 CVEs
4.0.2 <= v <= 4.0.225 CVEs
3.3 <= v <= 3.324 CVEs
4.2.1 <= v <= 4.2.123 CVEs
3.4.12 <= v <= 3.4.1222 CVEs
4.0.3 <= v <= 4.0.321 CVEs
4.2.2 <= v <= 4.2.221 CVEs
4.3 <= v <= 4.321 CVEs
4.3.1 <= v <= 4.3.121 CVEs
3.6.8 <= v <= 3.6.820 CVEs
4.3.2 <= v <= 4.3.220 CVEs
4.0.4 <= v <= 4.0.419 CVEs
4.2.3 <= v <= 4.2.319 CVEs
3.4.13 <= v <= 3.4.1318 CVEs
3.6.9 <= v <= 3.6.918 CVEs
4.0.5 <= v <= 4.0.518 CVEs
3.6.10 <= v <= 3.6.1017 CVEs
4.3.3 <= v <= 4.3.317 CVEs
2.16_rc2 <= v <= 2.16_rc216 CVEs
4.0.6 <= v <= 4.0.616 CVEs
4.0.7 <= v <= 4.0.716 CVEs
4.4 <= v <= 4.415 CVEs
4.0.8 <= v <= 4.0.814 CVEs
4.2.4 <= v <= 4.2.414 CVEs
3.6.11 <= v <= 3.6.1113 CVEs
4.2.5 <= v <= 4.2.513 CVEs
3.6.12 <= v <= 3.6.1211 CVEs
3.6.13 <= v <= 3.6.1311 CVEs
4.0.10 <= v <= 4.0.1011 CVEs
4.0.9 <= v <= 4.0.910 CVEs
4.2.6 <= v <= 4.2.610 CVEs
4.2.7 <= v <= 4.2.710 CVEs
4.2.8 <= v <= 4.2.810 CVEs
4.2.9 <= v <= 4.2.910 CVEs
4.4.1 <= v <= 4.4.110 CVEs
4.4.2 <= v <= 4.4.210 CVEs
4.0.11 <= v <= 4.0.119 CVEs
4.0.12 <= v <= 4.0.129 CVEs
4.0.13 <= v <= 4.0.139 CVEs
4.4.3 <= v <= 4.4.39 CVEs
4.4.4 <= v <= 4.4.49 CVEs
4.4.5 <= v <= 4.4.58 CVEs
4.2.10 <= v <= 4.2.107 CVEs
4.5.1 <= v <= 4.5.17 CVEs
4.5.2 <= v <= 4.5.27 CVEs
3.0_rc1 <= v <= 3.0_rc16 CVEs
4.0.14 <= v <= 4.0.146 CVEs
4.5 <= v <= 4.56 CVEs
4.5.3 <= v <= 4.5.36 CVEs
4.5.4 <= v <= 4.5.46 CVEs
<= 2.14.15 CVEs
4.2.11 <= v <= 4.2.115 CVEs
4.4.6 <= v <= 4.4.65 CVEs
4.5.5 <= v <= 4.5.55 CVEs
<= 3.2.94 CVEs
4.0.16 <= v <= 4.0.164 CVEs
4.2.12 <= v <= 4.2.124 CVEs
4.2.13 <= v <= 4.2.134 CVEs
4.2.14 <= v <= 4.2.144 CVEs
4.4.7 <= v <= 4.4.74 CVEs
4.4.8 <= v <= 4.4.84 CVEs
4.4.9 <= v <= 4.4.94 CVEs
5.0 <= v <= 5.04 CVEs
3.4.14 <= v <= 3.4.143 CVEs
4.0.15 <= v <= 4.0.153 CVEs
4.0.17 <= v <= 4.0.173 CVEs
4.0.18 <= v <= 4.0.183 CVEs
4.2.15 <= v <= 4.2.153 CVEs
4.4.10 <= v <= 4.4.103 CVEs
5.0.1 <= v <= 5.0.13 CVEs
<= 3.6.112 CVEs
<= 3.6.122 CVEs
4.5.6 <= v <= 4.5.62 CVEs
< 4.41 CVE
<= 2.22.11 CVE
<= 3.0.101 CVE
<= 3.2.81 CVE
<= 4.0.161 CVE
>= All versions prior to Bugzilla 4.41 CVE
4.4.11 <= v <= 4.4.111 CVE
5.0.2 <= v <= 5.0.21 CVE

Fixed in

4.41 CVE

Find a version

151 CVEs

Sort

High vulnerability · 2019-04-29
CVE-2018-5123
Public exploit
Patch
CWE-352
High · CVSS 8.8
EPSS 0.5% (42th pct)2019-04-29
Medium vulnerability · 2017-04-12
CVE-2016-2803
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 1.5% (74th pct)2017-04-12
Low vulnerability · 2016-01-03
CVE-2015-8509
Public exploit
Patch
CWE-200
Low · CVSS 3.5
EPSS 1.9% (79th pct)2016-01-03
Medium vulnerability · 2016-01-03
CVE-2015-8508
Public exploit
Patch
CWE-79
Medium · CVSS 4.7
EPSS 1.5% (73th pct)2016-01-03
High vulnerability · 2015-09-14
CVE-2015-4499
Public exploit
Patch
CWE-20
High · CVSS 7.5
EPSS 3.4% (89th pct)2015-09-14
Medium vulnerability · 2015-02-01
CVE-2014-8630CWE-77
Medium · CVSS 6.5
EPSS 2.0% (81th pct)2015-02-01
Medium vulnerability · 2014-10-13
CVE-2014-1573
Public exploit
CWE-79
Medium · CVSS 4.3
EPSS 2.3% (83th pct)2014-10-13
Medium vulnerability · 2014-10-13
CVE-2014-1572
Public exploit
Patch
CWE-264
Medium · CVSS 5.0
EPSS 1.8% (79th pct)2014-10-13
Medium vulnerability · 2014-10-13
CVE-2014-1571
Public exploit
Patch
CWE-200
Medium · CVSS 4.0
EPSS 1.4% (71th pct)2014-10-13
Medium vulnerability · 2014-08-14
CVE-2014-1546CWE-352
Medium · CVSS 4.3
EPSS 0.5% (44th pct)2014-08-14
Medium vulnerability · 2014-04-20
CVE-2014-1517
Patch
CWE-287
Medium · CVSS 4.0
EPSS 1.3% (70th pct)2014-04-20
Medium vulnerability · 2013-10-24
CVE-2013-1743
Public exploit
CWE-79
Medium · CVSS 4.3
EPSS 2.8% (86th pct)2013-10-24
Medium vulnerability · 2013-10-24
CVE-2013-1742
Public exploit
CWE-79
Medium · CVSS 4.3
EPSS 2.4% (84th pct)2013-10-24
Medium vulnerability · 2013-10-24
CVE-2013-1734
Public exploit
CWE-352
Medium · CVSS 6.8
EPSS 0.6% (46th pct)2013-10-24
Medium vulnerability · 2013-10-24
CVE-2013-1733
Public exploit
CWE-352
Medium · CVSS 6.8
EPSS 0.6% (46th pct)2013-10-24
Medium vulnerability · 2013-02-24
CVE-2013-0786CWE-200
Medium · CVSS 5.0
EPSS 1.7% (76th pct)2013-02-24
Medium vulnerability · 2013-02-24
CVE-2013-0785CWE-79
Medium · CVSS 4.3
EPSS 1.4% (73th pct)2013-02-24
Medium vulnerability · 2012-11-16
CVE-2012-5884CWE-200
Medium · CVSS 5.0
EPSS 1.2% (67th pct)2012-11-16
Medium vulnerability · 2012-11-16
CVE-2012-5883CWE-79
Medium · CVSS 4.3
EPSS 2.1% (81th pct)2012-11-16
Medium vulnerability · 2012-11-16
CVE-2012-4199CWE-200
Medium · CVSS 4.3
EPSS 1.0% (61th pct)2012-11-16
Medium vulnerability · 2012-11-16
CVE-2012-4198CWE-200
Medium · CVSS 4.0
EPSS 0.9% (58th pct)2012-11-16
Medium vulnerability · 2012-11-16
CVE-2012-4197
Public exploit
CWE-200
Medium · CVSS 5.0
EPSS 1.5% (75th pct)2012-11-16
Medium vulnerability · 2012-11-16
CVE-2012-4189
Public exploit
CWE-79
Medium · CVSS 4.3
EPSS 1.0% (63th pct)2012-11-16
Medium vulnerability · 2012-09-04
CVE-2012-4747CWE-264
Medium · CVSS 5.0
EPSS 1.7% (76th pct)2012-09-04
Medium vulnerability · 2012-09-04
CVE-2012-3981CWE-255
Medium · CVSS 5.0
EPSS 1.7% (77th pct)2012-09-04
Medium vulnerability · 2012-07-28
CVE-2012-1969CWE-264
Medium · CVSS 4.3
EPSS 1.6% (75th pct)2012-07-28
Medium vulnerability · 2012-07-28
CVE-2012-1968CWE-264
Medium · CVSS 4.3
EPSS 1.5% (73th pct)2012-07-28
Medium vulnerability · 2012-04-27
CVE-2012-0466CWE-264
Medium · CVSS 4.0
EPSS 0.8% (57th pct)2012-04-27
Medium vulnerability · 2012-04-27
CVE-2012-0465CWE-264
Medium · CVSS 4.3
EPSS 1.2% (68th pct)2012-04-27
Medium vulnerability · 2012-02-25
CVE-2012-0453CWE-352
Medium · CVSS 5.1
EPSS 0.8% (55th pct)2012-02-25

Showing 30 of 151

mozilla bugzilla Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other mozilla products

Frequently asked questions

References

Track mozilla bugzilla vulnerabilities