DO
Product
dotCMS
On CISA KEVExploited in the wildRansomware-linked
58
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 18Medium 27Low 1
Watch
Add dotCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-45783 | 6.5 | Feb 1 | An issue was discovered in dotCMS core 4.x through 22.10.2 Affected: 4.0.0 through 22.10.1 |
| CVE-2022-37033 | 6.5 | Feb 1 | In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to block any SSRF access to local IP addresses or private… Affected: before 21.06.12; 5.2.0 before 22.08; 22.03 before 22.03.4 |
| CVE-2017-3188 | 6.5 | Jul 24 | The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to path traversal Affected: through 3.7.1 |
| CVE-2016-3688 | 6.5 | Apr 19 | SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to… Affected: through 3.3.1 |
| CVE-2024-3938 | 6.1 | Jul 25 | The "reset password" login page accepted an HTML injection via URL parameters Affected: 5.1.5 before 23.01.18; 23.02 through 23.09.7; 23.12.21 through 24.04.23; 24.05.13 before 24.05.31; 23.10.24; 23.10.24; +14 more |
| CVE-2023-3042 | 6.1 | Oct 17 | In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from URLs, potentially enabling bypasses for XSS and access controls Affected: 5.3.8; 21.06; 22.03; 23.01 |
| CVE-2022-35740 | 6.1 | Nov 10 | dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using a semicolon in a URL to introduce a matrix parameter Affected: 5.3.8 before 5.3.8.12; 21.06 before 21.06.9; 22.01 before 22.06; 22.03 before 22.03.2 |
| CVE-2022-37431 | 6.1 | Aug 5 | A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06 Affected: through 22.06 |
| CVE-2019-11846 | 6.1 | May 14 | /servlets/ajax_file_upload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection Affected: 5.1.1 |
| CVE-2018-17422 | 6.1 | Mar 7 | dotCMS before 5.0.2 has open redirects via the html/common/forward_js.jsp FORWARD_URL parameter or the html/portlet/ext/common/page_preview_popup.jsp hostname parameter Affected: before 5.0.2 |
| CVE-2018-16980 | 6.1 | Sep 12 | dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters Affected: 5.0.1 |
| CVE-2017-6003 | 6.1 | Mar 27 | dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields Affected: 3.7.0 |
| CVE-2017-5877 | 6.1 | Feb 6 | XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter Affected: 3.7.0 |
| CVE-2017-5876 | 6.1 | Feb 6 | XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter Affected: 3.7.0 |
| CVE-2020-17542 | 5.4 | Apr 23 | Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the… Affected: 5.1.5 |
| CVE-2018-19554 | 5.4 | Nov 26 | An issue was discovered in Dotcms through 5.0.3 Affected: through 5.0.3 |
| CVE-2017-15219 | 5.4 | Oct 10 | The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting (XSS) affecting a vanity-urls Title field, a containers Description field, and a templates Description… Affected: 4.1.1 |
| CVE-2017-5875 | 5.4 | Feb 6 | XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter Affected: 3.7.0 |
| CVE-2022-37034 | 5.3 | Feb 1 | In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to download a large file Affected: before 21.06.12; 5.2.0 before 22.10; 22.03 before 22.03.4 |
| CVE-2019-12309 | 4.9 | May 23 | dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files Affected: before 5.1.0 |
| CVE-2021-35361 | 4.8 | Jul 9 | A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/links of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload Affected: 21.05.1 |
| CVE-2021-35360 | 4.8 | Jul 9 | A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/containers of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload Affected: 21.05.1 |
| CVE-2021-35358 | 4.8 | Jul 9 | A stored cross site scripting (XSS) vulnerability in dotAdmin/#/c/c_Images of dotCMS 21.05.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted… Affected: 21.05.1 |
| CVE-2020-35274 | 4.8 | Dec 21 | DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting (XSS) to gain remote privileges Affected: 20.11 |
| CVE-2016-3971 | 4.8 | Apr 18 | Cross-site scripting (XSS) vulnerability in lucene_search.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to… Affected: through 3.5 |
| CVE-2024-3165 | 4.5 | Apr 1 | System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for database connections in the log output Affected: 22.02 before 22.03.15; 23.01 before 23.01.15; 23.02 through 23.09.7; 23.10.24; 23.10.24; 23.10.24; +4 more |
| CVE-2024-3164 | 4.5 | Apr 1 | In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and… Affected: 22.02 before 22.03.15; 23.01 before 23.01.15; 23.02 through 23.09.7; 23.10.24; 23.10.24; 23.10.24; +4 more |
Showing 27