IC
Product
IceCMS
23
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 5High 10Medium 7Low 1
Watch
Add IceCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6761 | 8.8 | Dec 13 | Thecosy IceCMS User Data access control Affected: 2.0.0; 2.0.1 |
| CVE-2024-46607 | 7.6 | Sep 24 | Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the username and password via the loginAdmin method in… Affected: through 3.4.7 |
| CVE-2026-111686 | 7.5 | Oct 16 | IceCMS through 4.1.5 SQL Injection via /WebArticle/findarticlesbynum Affected: through 4.1.5 |
| CVE-2026-111685 | 7.5 | Oct 16 | IceCMS through 4.1.5 SQL Injection via /WebResource/findresourcebynum Affected: through 4.1.5 |
| CVE-2025-22984 | 7.5 | Jan 14 | An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information Affected: 2.2.0 |
| CVE-2025-22983 | 7.5 | Jan 14 | An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information Affected: 2.2.0 |
| CVE-2024-46609 | 7.5 | Sep 24 | An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and returns all user information,… Affected: through 3.4.7 |
| CVE-2024-46610 | 7.5 | Sep 24 | An access control issue in IceCMS v3.4.7 and before allows attackers to arbitrarily modify users' information, including username and password, via a crafted POST request sent to… Affected: through 3.4.7 |
| CVE-2023-6759 | 7.5 | Dec 13 | Thecosy IceCMS Love resource improper enforcement of a single, unique action Affected: 2.0.1 |
| CVE-2023-33355 | 7.5 | May 25 | IceCMS v1.0.0 has Insecure Permissions Affected: 1.0.0 |
Showing 10