wekan project wekan

Name: wekan project wekan
Brand: wekan project

ProduktUS

cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

KEV-gelistet

EPSS ≥ 10%

nach Schweregrad

3critical13high17medium0low

aktualisiert 2026-10-28

Schwachstellen (39)

Zugehörige CVEs.

Sortierung

ID	Schweregrad	EPSS	ausnutzbar	behoben	veröffentlicht	betroffen
CVE-2023-31779US	medium5.4	0.56% (46th)	Exploit	kein Fix	2023-05-22	≤ 6.84
CVE-2021-3309US	high8.1	1.72% (77th)	—	4.87	2021-01-26	< 4.87
CVE-2018-1000549US	medium5.3	1.30% (70th)	—	kein Fix	2018-06-26	= 1.04.0
CVE-2023-28485US	medium5.4	0.97% (62nd)	—	6.75	2023-06-26	< 6.75
CVE-2021-20654US	medium5.4	0.75% (55th)	—	kein Fix	2021-02-10	3.12 → 4.11
CVE-2026-25560US	critical9.8	0.74% (55th)	—	8.19	2026-02-07	< 8.19
CVE-2026-2207US	—	0.40% (34th)	—	8.21	2026-02-08	< 8.21
CVE-2026-25859US	high8.8OT erhöht	0.39% (33rd)	—	8.20	2026-02-07	< 8.20
CVE-2025-65778US	high8.1	0.38% (32nd)	—	8.16	2025-12-15	< 8.16
CVE-2026-1963US	critical9.8	0.36% (30th)	—	8.21	2026-02-05	< 8.21
CVE-2026-1962US	critical9.8	0.36% (30th)	—	8.21	2026-02-05	< 8.21
CVE-2026-30846US	high7.5OT erhöht	0.36% (29th)	—	8.33	2026-03-06	8.31 → 8.33
CVE-2025-65781US	high8.2	0.34% (28th)	—	8.16	2025-12-15	< 8.16
CVE-2026-1897US	—OT erhöht	0.34% (27th)	—	8.21	2026-02-05	< 8.21
CVE-2025-65780US	high8.8	0.34% (27th)	—	8.16	2025-12-15	< 8.16
CVE-2026-25562US	medium4.3	0.33% (25th)	—	8.19	2026-02-07	< 8.19
CVE-2026-25563US	high7.5	0.32% (25th)	—	8.19	2026-02-07	< 8.19
CVE-2026-25561US	high7.5OT erhöht	0.32% (25th)	—	8.19	2026-02-07	< 8.19
CVE-2026-25564US	high7.5	0.32% (24th)	—	8.19	2026-02-07	< 8.19
CVE-2025-65779US	high7.5	0.31% (24th)	—	8.16	2025-12-15	< 8.16
CVE-2026-25565US	medium6.5OT erhöht	0.31% (24th)	—	8.19	2026-02-07	< 8.19
CVE-2026-1895US	medium6.3	0.31% (24th)	—	8.21	2026-02-04	< 8.21
CVE-2026-1896US	—	0.31% (24th)	—	8.21	2026-02-05	< 8.21
CVE-2026-30845US	high8.2OT erhöht	0.31% (24th)	—	8.33	2026-03-06	8.31 → 8.33
CVE-2026-1898US	—	0.30% (23rd)	—	8.21	2026-02-05	< 8.21
CVE-2026-2208US	medium6.5OT erhöht	0.28% (21st)	—	8.21	2026-02-08	< 8.21
CVE-2026-2206US	high8.8	0.28% (20th)	—	8.21	2026-02-08	< 8.21
CVE-2026-25567US	medium4.3	0.28% (20th)	—	8.19	2026-02-07	< 8.19
CVE-2026-2205US	—	0.27% (20th)	—	8.21	2026-02-08	< 8.21
CVE-2026-1892US	—	0.27% (19th)	—	8.21	2026-02-04	< 8.21
CVE-2026-1894US	medium5.4	0.27% (18th)	—	8.21	2026-02-04	< 8.21
CVE-2025-65782US	medium6.5	0.26% (18th)	—	kein Fix	2025-12-15	≤ 8.15
CVE-2026-1964US	medium5.3	0.25% (17th)	—	8.21	2026-02-05	< 8.21
CVE-2026-25566US	medium5.4OT erhöht	0.25% (16th)	—	8.19	2026-02-07	< 8.19
CVE-2026-30844US	high8.1	0.24% (16th)	—	kein Fix	2026-03-06	2 Versionen
CVE-2026-30847US	medium6.5	0.24% (16th)	—	8.33	2026-03-06	8.31 → 8.33
CVE-2026-30843US	medium6.5	0.23% (13th)	—	kein Fix	2026-03-06	2 Versionen
CVE-2026-25568US	medium4.3OT erhöht	0.22% (12th)	—	8.19	2026-02-07	< 8.19
CVE-2026-2209US	medium4.3	0.22% (12th)	—	8.19	2026-02-08	< 8.19

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

CWE-284Improper Access Control11 CVEs
CWE-266Incorrect Privilege Assignment10 CVEs
CWE-863Incorrect Authorization7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-285Improper Authorization5 CVEs
CWE-639Authorization Bypass Through User-Controlled Key4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-862Missing Authorization3 CVEs

Datenquellen (1)

Welche Quellen diesen Datensatz belegen und wann.

USNVD / CVE39 CVEs

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan