Login Request a demo
OR
Product
orangescrum
by Orangescrum · last CVE Dec 23, 2025
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 5Medium 4Low 0
Severity
All severities9Critical0High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add orangescrum to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-47721
8.8
0%
Dec 23
Orangescrum 1.8.0 Authenticated Privilege Escalation via User Session Manipulation
Affected: 1.8.0
CVE-2023-0164
8.8
1%
Jan 18
OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary commands on the server
Affected: 2.0.11
CVE-2023-0454
8.1
1%
Feb 1
OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server
Affected: 2.0.11
CVE-2023-1783
7.6
1%
Jun 23
OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials
Affected: 2.0.11
CVE-2021-47720
7.1
0%
Dec 23
Orangescrum 1.8.0 Authenticated SQL Injection via Multiple Parameters
Affected: 1.8.0
CVE-2023-0738
6.1
0%
Apr 4
OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application
Affected: 2.0.11
CVE-2023-0624
6.1
0%
Feb 9
OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application
Affected: 2.0.11
CVE-2021-47716
5.4
0%
Dec 23
Orangescrum 1.8.0 Cross-Site Scripting via Authenticated Endpoints
Affected: 1.8.0
CVE-2024-48392
5.4
1%
Jan 21
OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS)
Affected: 2.0.11
Showing 9