Login Request a demo
EA
Product
Entity Api
by Entity Api Project · last CVE Sep 2, 2026
7
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 0Medium 4Low 0
Severity
All severities7Critical0High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Entity Api to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-1400
6.5
1%
Apr 10
The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions and read unpublished…
Affected: 7.x-1.0; 7.x-1.1; 7.x-1.2
CVE-2014-1399
6.5
1%
Apr 10
The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on…
Affected: 7.x-1.0; 7.x-1.1; 7.x-1.2
CVE-2014-1398
6.5
1%
Apr 10
The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on comment,…
Affected: 7.x-1.0; 7.x-1.1; 7.x-1.2
CVE-2026-81158
5.3
0%
Sep 2
Entity API - Moderately critical - Information disclosure - SA-CONTRIB-2026-113
Affected: 7.x-1.0 through 7.x-1.11; 8.x-0.1 before 8.x-1.8
Showing 4