Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Joomla Number Of NVD 260 CRITICAL 27 HIGH 67 MEDIUM 164 LOW 2
URL https://www.joomla.org/
Explanation Joomla is an open source Content Management System (CMS).

Each major version is supported for at least four years.

Basically, it is recommended to use the latest version.
Tag
  • GPL v2
  • PHP
  • オープンソース

Add Information URL
No Type Name URL
1 https://downloads.joomla.org/
2 https://www.joomla.org/announcements/release-news/
3 https://docs.joomla.org/Joomla!_CMS_versions
4 http://feeds.joomla.org/JoomlaSecurityNews
5 http://www.joomla.jp/
6 https://developer.joomla.org/roadmap.html
7 https://docs.joomla.org/Release_and_support_cycle
8 https://github.com/joomla

List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support
Extended
for a fee
Critical High Medium Low
221 Joomla 5.1 5.1.4 Aug. 27, 2024 April 16, 2024 0 4 7 0
222 Joomla 5.0 5.0.3 July 9, 2024 Oct. 17, 2023 April 16, 2024 0 5 7 0
223 Joomla 4.4 4.4.13 April 8, 2025 Oct. 17, 2023 Oct. 17, 2025 0 5 7 0
224 Joomla 4.3 4.3.4 Aug. 22, 2023 April 18, 2023 Oct. 17, 2023 0 6 8 0
225 Joomla 4.2 4.4.6 July 9, 2024 Aug. 16, 2022 April 18, 2023 0 6 15 0
226 Joomla 4.1 4.1.5 June 21, 2022 Feb. 15, 2022 Aug. 16, 2022 3 6 17 0
227 Joomla 4.0 4.0.6 Jan. 18, 2022 Aug. 17, 2021 Feb. 15, 2022 4 6 17 0
228 Joomla 3.10 3.10.11 Aug. 16, 2022 Aug. 17, 2021 Aug. 17, 2023 2 6 8 0
229 Joomla 3.9 3.9.28 July 6, 2021 Oct. 30, 2018 Aug. 17, 2023 11 25 63 0
230 Joomla 3.8 3.8.13 Oct. 9, 2018 Sept. 19, 2017 Oct. 30, 2018 13 32 71 0
231 Joomla 3.7 3.7.5 Aug. 17, 2017 April 25, 2017 Sept. 19, 2017 15 33 70 1
232 Joomla 3.6 3.6.5 Dec. 13, 2016 July 12, 2016 April 25, 2017 19 34 74 0
233 Joomla 3.5 3.5.1 April 5, 2016 March 21, 2016 July 12, 2016 19 34 72 0
234 Joomla 3.4 3.4.8 Dec. 24, 2015 Feb. 24, 2015 March 21, 2016 19 40 78 0
235 Joomla 3.3 3.3.4 Sept. 23, 2014 April 20, 2014 Feb. 24, 2015 18 41 78 0
236 Joomla 3.2 3.2.1 Dec. 18, 2014 Nov. 6, 2013 Oct. 31, 2014 18 43 80 0
237 Joomla 3.1 3.1.6 Nov. 6, 2013 April 24, 2013 Dec. 31, 2013 15 34 71 0
238 Joomla 3.0 3.0.3 Feb. 4, 2013 Sept. 27, 2012 May 31, 2013 15 34 76 0
239 Joomla 2.5 2.5.28 Dec. 10, 2014 Jan. 24, 2012 Dec. 31, 2014 13 30 58 0
240 Joomla 1.7 1.7.5 Feb. 2, 2012 July 19, 2011 Feb. 29, 2012 10 17 29 0
241 Joomla 1.6 1.6.6 July 26, 2011 Jan. 10, 2011 Aug. 31, 2011 10 14 30 0
242 Joomla 1.5 1.5.26 March 27, 2012 Jan. 22, 2008 Sept. 30, 2012 11 19 35 1
243 Joomla 1.0 1.0.15 Feb. 21, 2008 Sept. 17, 2005 July 22, 2009 5 15 30 0
244 Joomla 13.1 13.1 0 0 0 0
245 Joomla 12.3 12.3 0 0 0 0
246 Joomla 12.1 12.1 0 0 0 0
247 Joomla 11.4 11.4 0 0 0 0
248 Joomla 11.3 11.3 0 0 0 0
249 Joomla 11.2 11.2 0 0 0 0
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2
Level
Attach Vector
Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date
Show Affected Exploit
PoC
Search
221 -
5.0
MEDIUM Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" information via unknown attack vectors. NOTE: this might be a dup… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1611 cpe:2.3:a:joomla:joomla\!:2.5.3:*
cpe:2.3:a:joomla:joomla\!:2.5.2:*
cpe:2.3:a:joomla:joomla\!:2.5.1:*
cpe:2.3:…
2024-11-21 10:37
2012-09-7
Show GitHub Exploit DB Packet Storm
222 -
5.0
MEDIUM Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation path via unspecified vectors related to "administrator." CWE-200
Information Exposure
CVE-2012-0837 cpe:2.3:a:joomla:joomla\!:2.5.0:*
cpe:2.3:a:joomla:joomla\!:1.7.4:*
cpe:2.3:a:joomla:joomla\!:1.7.3:*
cpe:2.3:…
2024-11-21 10:35
2012-09-7
Show GitHub Exploit DB Packet Storm
223 -
5.0
MEDIUM Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 allows attackers to read the error log via unknown vectors. NVD-CWE-noinfo
CVE-2012-0836 cpe:2.3:a:joomla:joomla\!:1.7.4:*
cpe:2.3:a:joomla:joomla\!:1.7.3:*
cpe:2.3:a:joomla:joomla\!:1.7.2:*
cpe:2.3:…
2024-11-21 10:35
2012-09-7
Show GitHub Exploit DB Packet Storm
224 -
5.0
MEDIUM Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain sensitive information via unknown vectors related to "administrator." NVD-CWE-noinfo
CVE-2012-0835 cpe:2.3:a:joomla:joomla\!:2.5.0:*
cpe:2.3:a:joomla:joomla\!:1.7.4:*
cpe:2.3:a:joomla:joomla\!:1.7.3:*
cpe:2.3:…
2024-11-21 10:35
2012-09-7
Show GitHub Exploit DB Packet Storm
225 -
4.3
MEDIUM Cross-site scripting (XSS) vulnerability in Joomla! 1.6 and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than C… CWE-79
Cross-site Scripting
CVE-2012-0822 cpe:2.3:a:joomla:joomla\!:1.7.3:*
cpe:2.3:a:joomla:joomla\!:1.7.2:*
cpe:2.3:a:joomla:joomla\!:1.7.1:*
cpe:2.3:…
2024-11-21 10:35
2012-09-7
Show GitHub Exploit DB Packet Storm
226 -
5.0
MEDIUM Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2012-0819. NVD-CWE-noinfo
CVE-2012-0821 cpe:2.3:a:joomla:joomla\!:1.7.3:*
cpe:2.3:a:joomla:joomla\!:1.7.2:*
cpe:2.3:a:joomla:joomla\!:1.7.1:*
cpe:2.3:…
2024-11-21 10:35
2012-09-7
Show GitHub Exploit DB Packet Storm
227 -
4.3
MEDIUM Cross-site scripting (XSS) vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than… CWE-79
Cross-site Scripting
CVE-2012-0820 cpe:2.3:a:joomla:joomla\!:1.7.3:*
cpe:2.3:a:joomla:joomla\!:1.7.2:*
cpe:2.3:a:joomla:joomla\!:1.7.1:*
cpe:2.3:…
2024-11-21 10:35
2012-09-7
Show GitHub Exploit DB Packet Storm
228 -
5.0
MEDIUM Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2012-0821. NVD-CWE-noinfo
CVE-2012-0819 cpe:2.3:a:joomla:joomla\!:1.7.3:*
cpe:2.3:a:joomla:joomla\!:1.7.2:*
cpe:2.3:a:joomla:joomla\!:1.7.1:*
cpe:2.3:…
2024-11-21 10:35
2012-09-7
Show GitHub Exploit DB Packet Storm
229 -
5.0
MEDIUM Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header. CWE-200
Information Exposure
CVE-2012-3829 cpe:2.3:a:joomla:joomla\!:2.5.3:* 2024-11-21 10:41
2012-07-4
Show GitHub Exploit DB Packet Storm
230 -
4.3
MEDIUM Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the Host HTTP Header. CWE-79
Cross-site Scripting
CVE-2012-3828 cpe:2.3:a:joomla:joomla\!:2.5.3:* 2024-11-21 10:41
2012-07-4
Show GitHub Exploit DB Packet Storm