Usermin
Vendor:
First CVE: Jun 11, 2007 · Active for 19 years
22
Total CVEs
More Total CVEs than 94% of tracked products
2.4
Avg CVEs / Year
Higher CVE frequency than 74% of tracked products
5.7
Avg CVSS
Higher Avg CVSS than 17% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Usermin over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 11, 2007
19 years ago
Most Recent CVE
Apr 28, 2025
452 days ago
CVE Severity & Scoring
Usermin22 CVEs
91%
9%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network17 (77.3%)
Unknown5 (22.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low17 (77.3%)
High0 (0.0%)
Unknown5 (22.7%)
User Interaction
None3 (13.6%)
Unknown5 (22.7%)
Required14 (63.6%)
Privileges Required
Low12 (54.5%)
High0 (0.0%)
None5 (22.7%)
Unknown5 (22.7%)
Top CVEs
Signals from CVEs in this product scope (22 CVEs).
22 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-44762MEDIUM A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts. | Oct 16, 2024 | 5.3 | 34 | NO | YES |
CVE-2022-35132HIGH Usermin through 1.850 allows a remote authenticated user to execute OS commands via command injection in a filename for the GPG module. | Oct 25, 2022 | 8.8 | 29 | NO | NO |
CVE-2015-2079HIGH Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open. | Apr 28, 2025 | 8.8 | 26 | NO | NO |
CVE-2022-36880MEDIUM The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message. | Jul 27, 2022 | 6.1 | 22 | NO | NO |
CVE-2016-4897MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in (1) filter/save_forward.cgi, (2) filter/save.cgi, (3) /man/search.cgi in Usermin before 1.690. | Apr 12, 2017 | 6.1 | 21 | NO | NO |
CVE-2023-41152MEDIUM A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the handle progr | Sep 13, 2023 | 5.4 | 19 | NO | NO |
CVE-2023-41153MEDIUM A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via options for the h | Aug 29, 2023 | 5.4 | 19 | NO | NO |
CVE-2024-36453MEDIUM Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior to 1.970 and Usermin versions prior to 1.820. If this vulnerability is exploited, an arbitra | Jul 10, 2024 | 6.1 | 18 | NO | NO |
CVE-2023-41162MEDIUM A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask field | Sep 13, 2023 | 6.1 | 18 | NO | NO |
CVE-2023-41154MEDIUM A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the value field | Sep 13, 2023 | 5.4 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (22 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
4.5% of CVEs· 97th percentile
ExploitDB
1 CVE
4.5% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (22 CVEs).
Media Mentions
Signals from CVEs in this product scope (22 CVEs).
Top CNAs Publishing CVEs For Usermin
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.100 | 1 | 5.3 | 2.6% | 0 | 1 |
| 2.001 | 3 | 5.4 | 0.4% | 0 | 0 |
| 2.000 | 8 | 5.5 | 0.4% | 0 | 0 |
| 1.580 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.570 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.560 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.550 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.540 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.530 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.520 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.510 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.500 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.490 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.480 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.470 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.460 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.450 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.440 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.430 | 2 | 5.5 | 1.3% | 0 | 0 |
| 1.420 | 2 | 5.5 | 1.3% | 0 | 0 |