apache cordova
productUScpe:2.3:a:apache:cordova:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
1critical8high8medium1low
updated 2026-10-28
01
vulnerabilities (18)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2021-21315US | high7.8OT critical | KEV |
| CVE-2020-11990US | low3.3 | Exploit |
| CVE-2014-1882US | high7.5 | — |
| CVE-2014-1881US | high7.5 | — |
| CVE-2012-6637US | high7.5 | — |
| CVE-2014-0073US | critical9.8 | — |
| CVE-2014-1884US | high7.5 | — |
| CVE-2014-0072US | high7.5 | — |
| CVE-2015-1835US | medium5.3 | — |
| CVE-2014-3502US | medium4.3 | — |
| CVE-2015-5208US | medium4.4 | — |
| CVE-2015-8320US | medium5.0OT elevated | — |
| CVE-2015-5256US | medium4.3 | — |
| CVE-2014-3500US | medium6.4 | — |
| CVE-2017-3160US | high7.4OT elevated | — |
| CVE-2014-3501US | medium4.3 | — |
| CVE-2015-5207US | medium5.3 | — |
| CVE-2016-6799US | high7.5 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-264CWE-2645 CVEs
- CWE-20Improper Input Validation4 CVEs
- CWE-254CWE-2542 CVEs
- CWE-17CWE-171 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
- CWE-266Incorrect Privilege Assignment1 CVEs
- CWE-284Improper Access Control1 CVEs
- CWE-319Cleartext Transmission of Sensitive Information1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE18 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan