Ctools
Vendor:
First CVE: May 21, 2010 · Active for 16 years
11
Total CVEs
More Total CVEs than 90% of tracked products
2.2
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
4.6
Avg CVSS
Higher Avg CVSS than 7% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Ctools over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 21, 2010
16 years ago
Most Recent CVE
Aug 7, 2017
3,277 days ago
CVE Severity & Scoring
Ctools11 CVEs
36%
55%
9%
All CVEs353,240 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network1 (9.1%)
Unknown10 (90.9%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (9.1%)
High0 (0.0%)
Unknown10 (90.9%)
User Interaction
None1 (9.1%)
Unknown10 (90.9%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (9.1%)
Unknown10 (90.9%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-1547MEDIUM Multiple cross-site request forgery (CSRF) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote attackers to hijack the authentica | May 21, 2010 | 6.8 | 20 | NO | NO |
CVE-2015-7875HIGH ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins that are used on Panels and similar systems | Aug 7, 2017 | 7.5 | 19 | NO | NO |
CVE-2010-2010MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote attackers to inject arbitrary web script | May 21, 2010 | 4.3 | 19 | NO | NO |
CVE-2010-1546MEDIUM Multiple eval injection vulnerabilities in the import functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with | May 21, 2010 | 6.0 | 19 | NO | NO |
CVE-2015-4398MEDIUM Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to redirect users to arbitrary web | Jun 16, 2015 | 5.8 | 16 | NO | NO |
CVE-2015-6665MEDIUM Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Drupal allows remote attackers to inject ar | Aug 24, 2015 | 4.3 | 14 | NO | NO |
CVE-2015-4375MEDIUM The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search on custom entities wit | Jun 15, 2015 | 4.3 | 14 | NO | NO |
Cross-site scripting (XSS) vulnerability in the page manager node view task in the Chaos tool suite (ctools) module 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated u | Dec 3, 2012 | 2.6 | 14 | NO | NO |
The auto-complete functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal does not follow access restrictions, which allows remote authenticated use | May 21, 2010 | 3.5 | 14 | NO | NO |
The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" per | Jul 16, 2013 | 3.5 | 13 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Ctools
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.x-1.x | 3 | 4.4 | 1.5% | 0 | 0 |
| 7.x-1.7 | 1 | 7.5 | 1.1% | 0 | 0 |
| 7.x-1.6 | 3 | 5.9 | 1.2% | 0 | 0 |
| 7.x-1.5 | 3 | 5.9 | 1.2% | 0 | 0 |
| 7.x-1.4 | 3 | 5.9 | 1.2% | 0 | 0 |
| 7.x-1.3 | 3 | 5.9 | 1.2% | 0 | 0 |
| 7.x-1.2 | 4 | 5.3 | 1.4% | 0 | 0 |
| 7.x-1.1 | 4 | 5.3 | 1.4% | 0 | 0 |
| 7.x-1.0 | 5 | 4.5 | 1.5% | 0 | 0 |
| 6.x-1.x | 7 | 5.0 | 1.4% | 0 | 0 |
| 6.x-1.9 | 3 | 4.8 | 1.9% | 0 | 0 |
| 6.x-1.8 | 3 | 4.8 | 1.9% | 0 | 0 |
| 6.x-1.7 | 3 | 4.8 | 1.9% | 0 | 0 |
| 6.x-1.6 | 3 | 4.8 | 1.9% | 0 | 0 |
| 6.x-1.5 | 3 | 4.8 | 1.9% | 0 | 0 |
| 6.x-1.4 | 3 | 4.8 | 1.9% | 0 | 0 |
| 6.x-1.3 | 7 | 5.0 | 1.4% | 0 | 0 |
| 6.x-1.2 | 7 | 5.0 | 1.4% | 0 | 0 |
| 6.x-1.13 | 2 | 5.9 | 1.9% | 0 | 0 |
| 6.x-1.12 | 2 | 5.9 | 1.9% | 0 | 0 |