Known Vulnerabilities for products from Entity Api Project
Listed below are 7 of the newest known vulnerabilities associated with the vendor "Entity Api Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-108086 json | Not Provided | 2026-10-20 | 2026-10-20 | |
| CVE-2026-105637 json | Not Provided | 2026-10-05 | 2026-10-05 | |
| CVE-2026-105631 json | Not Provided | 2026-10-05 | 2026-10-07 | |
| CVE-2026-104968 json | Not Provided | 2026-10-05 | 2026-10-05 | |
| CVE-2026-104679 json | Not Provided | 2026-10-19 | 2026-10-20 | |
| CVE-2026-82745 json | Not Provided | 2026-09-01 | 2026-09-01 | |
| CVE-2026-81158 json | Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: ... | Not Provided | 2026-09-02 | 2026-10-01 |
| CVE-2026-54640 json | Not Provided | 2026-10-13 | 2026-10-13 | |
| CVE-2026-40682 json | Not Provided | 2026-05-04 | 2026-09-02 | |
| CVE-2015-2197 json | Cross-site scripting (XSS) vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users... | Not Provided | 2015-03-03 | 2026-05-06 |
| CVE-2014-1400 json | The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to by... | 6.5 - MEDIUM | 2018-04-10 | 2018-05-18 |
| CVE-2014-1399 json | The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated use... | 6.5 - MEDIUM | 2018-04-10 | 2018-05-18 |
| CVE-2014-1398 json | The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated use... | 6.5 - MEDIUM | 2018-04-10 | 2018-05-18 |
| CVE-2013-7391 json | The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remote at... | Not Provided | 2014-07-19 | 2026-05-06 |
| CVE-2013-4273 json | The Entity API module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to node comments, which allows remo... | Not Provided | 2014-07-19 | 2026-05-06 |
Known software with vulnerabilities from Entity Api Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Entity Api Project | Entity Api | 7.x-1.0 |