trustwave modsecurity

Name: trustwave modsecurity
Brand: trustwave

productUS

cpe:2.3:a:trustwave:modsecurity:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical5high7medium0low

updated 2026-10-28

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2009-1902US	medium5.0	13.7% (96th)	Exploit	2.5.9	2009-06-03	< 2.5.9
CVE-2013-2765US	medium5.0	13.7% (96th)	Exploit	2.7.4	2013-07-15	< 2.7.4
CVE-2012-4528US	medium5.0	12.4% (96th)	Exploit	2.7.0	2012-12-28	< 2.7.0
CVE-2021-42717US	high7.5	3.25% (88th)	Exploit	2.9.5	2021-12-07	2.0.0 → 2.9.5
CVE-2025-47947US	—	0.60% (48th)	Exploit	2.9.9	2025-05-21	< 2.9.9
CVE-2013-1915US	high7.5	4.21% (91st)	—	2.7.3	2013-04-25	< 2.7.3
CVE-2012-2751US	medium4.3	3.30% (88th)	—	2.6.6	2012-07-22	< 2.6.6
CVE-2009-1903US	medium4.3	3.03% (87th)	—	2.5.8	2009-06-03	< 2.5.8
CVE-2009-5031US	medium4.3	2.93% (87th)	—	2.5.11	2012-07-22	< 2.5.11
CVE-2013-5705US	medium5.0	2.72% (86th)	—	2.7.6	2014-04-15	< 2.7.6
CVE-2022-48279US	high7.5	1.17% (67th)	—	2.9.6	2023-01-20	< 2.9.6
CVE-2023-24021US	high7.5	0.91% (60th)	—	2.9.7	2023-01-20	< 2.9.7
CVE-2024-46292US	—	0.82% (57th)	—	no fix	2024-10-09	= 3.0.12
CVE-2025-27110US	high7.5	0.48% (42nd)	—	no fix	2025-02-25	= 3.0.13

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-1050Excessive Platform Resource Consumption within a Loop1 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-170Improper Null Termination1 CVEs
CWE-172Encoding Error1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.