Moodle Moodle
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical6high7medium2low
updated 2026-10-28
01
vulnerabilities (21)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2012-1168US | high8.2 | — |
| CVE-2012-1156US | high7.5 | — |
| CVE-2012-1155US | high7.5 | — |
| CVE-2012-1169US | medium5.3 | — |
| CVE-2012-1159US | medium4.3 | — |
| CVE-2012-1161US | medium4.3 | — |
| CVE-2012-1158US | medium4.3 | — |
| CVE-2019-10154US | high7.5 | — |
| CVE-2012-1160US | low2.7 | — |
| CVE-2012-1157US | medium4.3OT elevated | — |
| CVE-2019-10134US | low3.7 | — |
| CVE-2012-1170US | high7.5 | — |
| CVE-2019-10133US | medium6.1 | — |
| CVE-2024-38276US | high8.8 | — |
| CVE-2024-38275US | — | — |
| CVE-2024-38273US | — | — |
| CVE-2021-47857US | medium6.1 | — |
| CVE-2024-38274US | — | — |
| CVE-2024-33996US | — | — |
| CVE-2025-53021US | — | — |
| CVE-2024-38277US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
- CWE-20Improper Input Validation3 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
- CWE-226Sensitive Information in Resource Not Removed Before Reuse1 CVEs
- CWE-276Incorrect Default Permissions1 CVEs
- CWE-284Improper Access Control1 CVEs
- CWE-285Improper Authorization1 CVEs
- CWE-324Use of a Key Past its Expiration Date1 CVEs
03
sources (1)
Which sources assert this record, and when.
- EUEU Vulnerability Database (ENISA)21 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan