Drupal Data vulnerabilities

2 CVEs affecting Drupal Data, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2715, published 2020-01-14.

More from Drupal.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-2714, published 2020-01-14. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. A Cross-Site Scripting vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table descriptions, field names, or labels before display.
• CVE-2011-2715, published 2020-01-14. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.