chamilo chamilo

Name: chamilo chamilo
Brand: chamilo

productUS

cpe:2.3:a:chamilo:chamilo:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical4high16medium1low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-34960US	critical9.8	99.3% (100th)	Exploit	no fix	2023-08-01	1.11.0 → 1.11.18
CVE-2021-31933US	high7.2	13.9% (97th)	Exploit	no fix	2021-04-30	≤ 1.11.14
CVE-2023-3368US	critical9.8	69.7% (99th)	—	1.11.20	2023-11-28	< 1.11.20
CVE-2021-34187US	critical9.8	16.2% (97th)	—	no fix	2021-06-28	≤ 1.11.14
CVE-2023-3533US	critical9.8	3.50% (89th)	—	no fix	2023-11-28	≤ 1.11.20
CVE-2023-3545US	critical9.8	2.44% (84th)	—	no fix	2023-11-28	≤ 1.11.20
CVE-2022-40407US	high8.8	1.67% (77th)	—	no fix	2022-09-29	= 1.11
CVE-2021-32925US	medium6.5	1.67% (77th)	—	no fix	2021-05-13	1.11.0 → 1.11.16
CVE-2012-4029US	medium6.1	1.44% (73rd)	—	1.8.8.6	2020-02-08	< 1.8.8.6
CVE-2021-43687US	medium6.1	1.20% (68th)	—	no fix	2021-12-01	= 1.11.14
CVE-2021-40662US	high8.8	1.10% (65th)	—	no fix	2022-03-21	= 1.11.14
CVE-2021-37389US	medium6.1	1.03% (63rd)	—	no fix	2021-08-10	= 1.11.14
CVE-2021-26746US	medium6.1	0.99% (62nd)	—	no fix	2021-02-19	= 1.11.14
CVE-2021-38745US	medium6.8	0.85% (58th)	—	no fix	2022-03-21	= 1.11.14
CVE-2022-42029US	high8.8	0.85% (58th)	—	no fix	2022-10-17	= 1.11.16
CVE-2013-0739US	medium6.1	0.80% (56th)	—	no fix	2020-01-30	= 1.9.4
CVE-2013-0738US	medium6.1	0.80% (56th)	—	no fix	2020-01-30	= 1.9.4
CVE-2022-27425US	medium6.1	0.60% (48th)	—	no fix	2022-04-15	1.11.0 → 1.11.16
CVE-2023-37067US	medium4.8	0.38% (32nd)	—	no fix	2023-07-07	1.11.0 → 1.11.20
CVE-2023-37066US	medium4.8	0.38% (32nd)	—	no fix	2023-07-07	1.11.0 → 1.11.20
CVE-2023-37065US	medium4.8	0.38% (32nd)	—	no fix	2023-07-07	1.11.0 → 1.11.20
CVE-2023-37064US	medium4.8	0.38% (32nd)	—	no fix	2023-07-07	1.11.0 → 1.11.20
CVE-2023-37063US	medium4.8	0.38% (32nd)	—	no fix	2023-07-07	1.11.0 → 1.11.20
CVE-2023-37062US	medium4.8	0.38% (32nd)	—	no fix	2023-07-07	1.11.0 → 1.11.20
CVE-2023-37061US	medium4.8	0.38% (32nd)	—	no fix	2023-07-07	1.11.0 → 1.11.20
CVE-2023-39061US	low3.5	0.28% (21st)	—	no fix	2023-08-21	1.11 → 1.11.20

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')14 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type2 CVEs
CWE-178Improper Handling of Case Sensitivity1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-706Use of Incorrectly-Resolved Name or Reference1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan