DO
Product
dotCMS
On CISA KEVExploited in the wildRansomware-linked
58
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 18Medium 27Low 1
Watch
Add dotCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26352 RansomwareIn wildKEV | 9.8 | Jul 17 | dotCMS Unrestricted Upload of File Vulnerability Affected: 3.0 through 22.02 |
| CVE-2025-11165 | 9.9 | Feb 24 | A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privileges to bypass class and package… Affected: 24.12; 25.07 |
| CVE-2020-19138 | 9.8 | Sep 8 | Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the component… Affected: through 5.2.3 |
| CVE-2020-6754 | 9.8 | Feb 5 | dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control Affected: before 5.2.4 |
| CVE-2017-5344 | 9.8 | Feb 17 | An issue was discovered in dotCMS through 3.6.1 Affected: through 3.6.1 |
| CVE-2016-2355 | 9.8 | Dec 19 | SQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to execute arbitrary SQL commands via the stName parameter to api/content/save/1 Affected: through 3.3.1 |
| CVE-2016-8902 | 9.8 | Nov 14 | SQL injection vulnerability in the categoriesServlet servlet in dotCMS before 3.3.1 allows remote not authenticated attackers to execute arbitrary SQL commands via the sort… Affected: through 3.3 |
| CVE-2026-16337 | 9.4 | Jul 20 | Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22-03 on all platforms allows a low-privileged authenticated… Affected: 21.02 through 26.06.22-03 |
| CVE-2022-45782 | 8.8 | Feb 1 | An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1 Affected: 5.3.8.5 through 5.3.8.15; 21.03 through 21.10.1 |
| CVE-2020-18875 | 8.8 | Aug 18 | Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files Affected: before 5.1.0 |
| CVE-2020-27848 | 8.8 | Dec 30 | dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter Affected: before 20.10.1 |
| CVE-2017-3187 | 8.8 | Jul 24 | The dotCMS administration panel, versions 3.7.1 and earlier, are vulnerable to cross-site request forgery Affected: through 3.7.1 |
| CVE-2016-8908 | 8.8 | Nov 14 | SQL injection vulnerability in the "Site Browser > HTML pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the… Affected: through 3.3 |
| CVE-2016-8907 | 8.8 | Nov 14 | SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the… Affected: through 3.3 |
| CVE-2016-8906 | 8.8 | Nov 14 | SQL injection vulnerability in the "Site Browser > Links pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the… Affected: through 3.3 |
| CVE-2016-8905 | 8.8 | Nov 14 | SQL injection vulnerability in the JSONTags servlet in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the sort parameter Affected: through 3.3 |
| CVE-2016-8904 | 8.8 | Nov 14 | SQL injection vulnerability in the "Site Browser > Containers pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the… Affected: through 3.3 |
| CVE-2016-8903 | 8.8 | Nov 14 | SQL injection vulnerability in the "Site Browser > Templates pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the… Affected: through 3.3 |
| CVE-2017-3189 | 8.1 | Jul 24 | The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to arbitrary file upload Affected: through 3.7.1 |
| CVE-2016-8600 | 7.5 | Oct 28 | In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later Affected: 3.2.1 |
| CVE-2016-4803 | 7.5 | Jun 30 | CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject Affected: through 3.3.1 |
| CVE-2019-12872 | 7.2 | Jun 18 | dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp Affected: before 5.1.6 |
| CVE-2016-10008 | 7.2 | Feb 19 | SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute… Affected: before 3.7.2; 4.0.0 before 4.1.1 |
| CVE-2016-10007 | 7.2 | Feb 19 | SQL injection vulnerability in the "Marketing > Forms" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute arbitrary SQL… Affected: before 3.7.2; 4.0.0 before 4.1.1 |
| CVE-2017-11466 | 7.2 | Jul 20 | Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to… Affected: 4.1.1 |
| CVE-2016-4040 | 7.2 | Apr 19 | SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter Affected: through 3.3.1 |
| CVE-2022-45783 | 6.5 | Feb 1 | An issue was discovered in dotCMS core 4.x through 22.10.2 Affected: 4.0.0 through 22.10.1 |
| CVE-2022-37033 | 6.5 | Feb 1 | In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to block any SSRF access to local IP addresses or private… Affected: before 21.06.12; 5.2.0 before 22.08; 22.03 before 22.03.4 |
| CVE-2017-3188 | 6.5 | Jul 24 | The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to path traversal Affected: through 3.7.1 |
| CVE-2016-3688 | 6.5 | Apr 19 | SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to… Affected: through 3.3.1 |
| CVE-2024-3938 | 6.1 | Jul 25 | The "reset password" login page accepted an HTML injection via URL parameters Affected: 5.1.5 before 23.01.18; 23.02 through 23.09.7; 23.12.21 through 24.04.23; 24.05.13 before 24.05.31; 23.10.24; 23.10.24; +14 more |
| CVE-2023-3042 | 6.1 | Oct 17 | In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from URLs, potentially enabling bypasses for XSS and access controls Affected: 5.3.8; 21.06; 22.03; 23.01 |
| CVE-2022-35740 | 6.1 | Nov 10 | dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using a semicolon in a URL to introduce a matrix parameter Affected: 5.3.8 before 5.3.8.12; 21.06 before 21.06.9; 22.01 before 22.06; 22.03 before 22.03.2 |
| CVE-2022-37431 | 6.1 | Aug 5 | A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06 Affected: through 22.06 |
| CVE-2019-11846 | 6.1 | May 14 | /servlets/ajax_file_upload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection Affected: 5.1.1 |
| CVE-2018-17422 | 6.1 | Mar 7 | dotCMS before 5.0.2 has open redirects via the html/common/forward_js.jsp FORWARD_URL parameter or the html/portlet/ext/common/page_preview_popup.jsp hostname parameter Affected: before 5.0.2 |
| CVE-2018-16980 | 6.1 | Sep 12 | dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters Affected: 5.0.1 |
| CVE-2017-6003 | 6.1 | Mar 27 | dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields Affected: 3.7.0 |
| CVE-2017-5877 | 6.1 | Feb 6 | XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter Affected: 3.7.0 |
| CVE-2017-5876 | 6.1 | Feb 6 | XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter Affected: 3.7.0 |
| CVE-2020-17542 | 5.4 | Apr 23 | Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the… Affected: 5.1.5 |
| CVE-2018-19554 | 5.4 | Nov 26 | An issue was discovered in Dotcms through 5.0.3 Affected: through 5.0.3 |
| CVE-2017-15219 | 5.4 | Oct 10 | The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting (XSS) affecting a vanity-urls Title field, a containers Description field, and a templates Description… Affected: 4.1.1 |
| CVE-2017-5875 | 5.4 | Feb 6 | XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter Affected: 3.7.0 |
| CVE-2022-37034 | 5.3 | Feb 1 | In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to download a large file Affected: before 21.06.12; 5.2.0 before 22.10; 22.03 before 22.03.4 |
| CVE-2019-12309 | 4.9 | May 23 | dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files Affected: before 5.1.0 |
| CVE-2021-35361 | 4.8 | Jul 9 | A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/links of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload Affected: 21.05.1 |
| CVE-2021-35360 | 4.8 | Jul 9 | A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/containers of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload Affected: 21.05.1 |
| CVE-2021-35358 | 4.8 | Jul 9 | A stored cross site scripting (XSS) vulnerability in dotAdmin/#/c/c_Images of dotCMS 21.05.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted… Affected: 21.05.1 |
| CVE-2020-35274 | 4.8 | Dec 21 | DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting (XSS) to gain remote privileges Affected: 20.11 |