CWE-90

102 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 12High 33Medium 51Low 6Not scored 0

CVEs per yearBy the year they were published

CVE-2026-114420
LDAP wildcard injection exposes GINA recipient accounts
SEPPmail AG · SEPPmail Secure Email Gateway (SEG)
Medium6.9
CVE-2026-93636
Zimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Name
Zimbra · Zimbra Collaboration Suite
Medium4.3
CVE-2026-15723
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
GitLab · GitLab
High8.2
CVE-2026-93635
Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution
Zimbra · Zimbra Collaboration Suite
Medium5.3
CVE-2026-89071
MOVEit Transfer LDAP injection in certificate-based authentication
Progress · MOVEit Transfer
High7.5
CVE-2026-110256
Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth
Finsys · dockhand
Medium6.3
CVE-2026-10759
BUG-000171040 Portal for ArcGIS has a security vulnerability
Esri · Portal for ArcGIS
Medium5.5
CVE-2025-71431
Frappe before 15.86.0 LDAP Injection via Unsanitized Endpoint Parameters
frappe · frappe
Medium6.3
CVE-2026-109357
LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header
librenms · librenms
Critical9.2
CVE-2026-94053
Apache MINA SSHD: LDAP injection in sshd-ldap
Apache Software Foundation · Apache MINA SSHD
Critical9.1