Drupal Views vulnerabilities

2 CVEs affecting Drupal Views, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-2076, published 2009-06-16.

More from Drupal.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-6020, published 2009-02-02. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK…
• CVE-2009-2076, published 2009-06-16. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the…