GCVE - cpe:2.3:a:joomla:joomla\!:3.7.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:joomla:joomla\!:3.7.3:*:*:*:*:*:*:*

part: a version: 3.7.3 update: *

Vendor	Joomla (`6fa59c4b-5b62-59b9-bce0-735b9b6b6c51`)
Product	Joomla! (`10fae64e-55af-54aa-88fc-fe7759e94ebb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-14596`	vulnerable	2026-06-08 05:08:50.214049	Details available In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password. Published: 2017-09-20T18:00:00.000Z Updated: 2024-08-05T19:34:39.270Z Open on db.gcve.eu Reference links https://developer.joomla.org/security-centre/711-20170902-core-ldap-information-disclosure https://blog.ripstech.com/2017/joomla-takeover-in-20-seconds-with-ldap-injection-cve-2017-14596/ http://www.securitytracker.com/id/1039407 http://www.securityfocus.com/bid/100898	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14595`	vulnerable	2026-06-08 05:08:50.152541	Details available In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state. Published: 2017-09-20T18:00:00.000Z Updated: 2024-08-05T19:34:38.649Z Open on db.gcve.eu Reference links https://developer.joomla.org/security-centre/710-20170901-core-information-disclosure http://www.securitytracker.com/id/1039407 http://www.securityfocus.com/bid/100900	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11612`	vulnerable	2026-06-08 05:08:38.184098	Details available In Joomla! before 3.7.4, inadequate filtering of potentially malicious HTML tags leads to XSS vulnerabilities in various components. Published: 2017-07-26T15:00:00.000Z Updated: 2024-08-05T18:12:40.693Z Open on db.gcve.eu Reference links https://developer.joomla.org/security-centre/701-20170605-core-xss-vulnerability.html http://www.securitytracker.com/id/1039014	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11364`	vulnerable	2026-06-08 05:08:37.464596	Details available The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs. Published: 2017-08-02T14:00:00.000Z Updated: 2024-08-05T18:05:30.495Z Open on db.gcve.eu Reference links https://twitter.com/hanno/status/890281330906247168 https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Hanno-Boeck-Abusing-Certificate-Transparency-Logs.pdf http://www.securitytracker.com/id/1039015 https://developer.joomla.org/security-centre/700-20170704-core-installer-lack-of-ownership-verification.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.