Skip to content
BackEsc
Sign in

CWE-90 · weakness in Injection and Smuggling

Improper Neutralization of Special Elements used in an LDAP Query

108 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

likely to be exploited
1

Every one of the 108 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP que…CVE-2016-929997% likely
  2. In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password.CVE-2017-145966.9% likely
  3. Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDA…CVE-2016-8750Apache Software Foundation · 5.2% likely

    Apache

  4. LDAP filter injection vulnerability in Traffic OpsCVE-2021-43350Apache Software Foundation · 4.8% likely

    Apache

  5. VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which may allow for remote denial of service.CVE-2017-4927VMware · 2.3% likely

    VMware

  6. DOS VulnerabilityCVE-2024-27310ManageEngine · CVSS 5.3 · 2.3% likely

    Zoho (ManageEngine)

  7. MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "lin…CVE-2018-57302.2% likely
  8. ldapauth-fork before 2.3.3 allows remote attackers to perform LDAP injection attacks via a crafted username.CVE-2015-72942.1% likely
  9. Volume Services is vulnerable to an LDAP injection attackCVE-2019-11277Cloud Foundry · CVSS 8.4 · 1.7% likely

    Cloud Foundry

  10. The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outside of the intended hierarchy. Unauthorize…CVE-2023-29050Open-Xchange GmbH · CVSS 7.6 · 1.7% likely

    Open-Xchange GmbH

  11. Apache ManifoldCF: LDAP Injection Vulnerability - ActiveDirectory AuthoritiesCVE-2022-45910Apache Software Foundation · CVSS 5.3 · 1.6% likely

    Apache

  12. html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username.CVE-2011-40691.6% likely
  13. Indirect LDAP injection in TuleapCVE-2021-41276Enalean · CVSS 6.7 · 1.5% likely

    Enalean

  14. Improper Neutralization of Special Elements used in an LDAP QueryCVE-2021-41232StevenWeathers · CVSS 8.1 · 1.5% likely
  15. Indirect LDAP injection in TuleapCVE-2021-43782Enalean · CVSS 6.7 · 1.4% likely

    Enalean

  16. An issue was discovered on Accellion FTA devices before FTA_9_12_180. The home/seos/courier/ldaptest.html POST parameter "filter" can be used for LDAP Injection.CVE-2017-87901.4% likely
  17. LDAP connector injection in PerunCVE-2020-5281CESNET · CVSS 6.2 · 1.4% likely

    CESNET

  18. Mastodon's blind LDAP injection in login allows the attacker to leak arbitrary attributes from LDAP databaseCVE-2023-28853mastodon · CVSS 7.7 · 1.3% likely

    Mastodon

  19. LDAP injection via OneDev may leak some LDAP directory informationCVE-2021-32651theonedev · CVSS 3.1 · 1.1% likely

    Theonedev

  20. IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attac…CVE-2019-4297IBM · CVSS 6.4 · 1.0% likely

    IBM

  21. Yamcs Vulnerable to LDAP Injection in LdapAuthModuleCVE-2026-42568yamcs · CVSS 4.3 · 1.0% likely

    Yamcs

  22. OpenAM Authentication Bypass via MSISDN LDAP InjectionCVE-2026-46619OpenIdentityPlatform · CVSS 9.3 · 1.0% likely

    OpenIdentityPlatform

  23. sssd: libsss_certmap fails to sanitise certificate data used in LDAP filtersCVE-2022-4254SSSD · CVSS 8.8 · 1.0% likely
  24. hydrian TTRSS-Auth-LDAP Username ldap injectionCVE-2015-10027hydrian · CVSS 5.5 · 0.9% likely
  25. WatchGuard Firebox LDAP InjectionCVE-2026-1498WatchGuard · CVSS 7 · 0.9% likelycovered by CyberSIXT

    WatchGuard

  26. An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.CVE-2024-33868Linqi · CVSS 9.8 · 0.9% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in