DO
Vendor
dotCMS
59
CVEs
1
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-16337 | DO dotCMS dotCMS | 9.4 | Jul 20 | Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22-03 on all platforms allows a low-privileged authenticated… |
| CVE-2026-8054 | DC dotCMS Core dotCMS | 10.0 | May 27 | Unauthenticated SQL Injection in dotCMS Publish Audit API |
| CVE-2025-11165 | DO dotCMS dotCMS | 9.9 | Feb 24 | A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privileges to bypass class and package… |
| CVE-2024-3938 | DO Dotcms Dotcms | 6.1 | Jul 25 | The "reset password" login page accepted an HTML injection via URL parameters |
| CVE-2024-3165 | DO Dotcms Dotcms | 4.5 | Apr 1 | System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for database connections in the log output |
| CVE-2024-3164 | DO Dotcms Dotcms | 4.5 | Apr 1 | In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and… |
| CVE-2023-3042 | DO Dotcms Dotcms | 6.1 | Oct 17 | In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from URLs, potentially enabling bypasses for XSS and access controls |
| CVE-2022-37034 | DO Dotcms Dotcms | 5.3 | Feb 1 | In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to download a large file |
| CVE-2022-45783 | DO Dotcms Dotcms | 6.5 | Feb 1 | An issue was discovered in dotCMS core 4.x through 22.10.2 |
| CVE-2022-45782 | DO Dotcms Dotcms | 8.8 | Feb 1 | An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1 |
| CVE-2022-37033 | DO Dotcms Dotcms | 6.5 | Feb 1 | In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to block any SSRF access to local IP addresses or private… |
| CVE-2022-35740 | DO Dotcms Dotcms | 6.1 | Nov 10 | dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using a semicolon in a URL to introduce a matrix parameter |
| CVE-2022-37431 | DO Dotcms Dotcms | 6.1 | Aug 5 | A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06 |
| CVE-2022-26352 RansomwareIn wildKEV | DO Dotcms Dotcms | 9.8 | Jul 17 | dotCMS Unrestricted Upload of File Vulnerability |
| CVE-2020-19138 | DO Dotcms Dotcms | 9.8 | Sep 8 | Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the component… |
| CVE-2020-18875 | DO Dotcms Dotcms | 8.8 | Aug 18 | Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files |
| CVE-2021-35361 | DO Dotcms Dotcms | 4.8 | Jul 9 | A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/links of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload |
| CVE-2021-35360 | DO Dotcms Dotcms | 4.8 | Jul 9 | A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/containers of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload |
| CVE-2021-35358 | DO Dotcms Dotcms | 4.8 | Jul 9 | A stored cross site scripting (XSS) vulnerability in dotAdmin/#/c/c_Images of dotCMS 21.05.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted… |
| CVE-2020-17542 | DO Dotcms Dotcms | 5.4 | Apr 23 | Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the… |
| CVE-2020-27848 | DO Dotcms Dotcms | 8.8 | Dec 30 | dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter |
| CVE-2020-35274 | DO Dotcms Dotcms | 4.8 | Dec 21 | DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting (XSS) to gain remote privileges |
| CVE-2020-6754 | DO Dotcms Dotcms | 9.8 | Feb 5 | dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control |
| CVE-2019-12872 | DO Dotcms Dotcms | 7.2 | Jun 18 | dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp |
| CVE-2019-12309 | DO Dotcms Dotcms | 4.9 | May 23 | dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files |
| CVE-2019-11846 | DO Dotcms Dotcms | 6.1 | May 14 | /servlets/ajax_file_upload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection |
| CVE-2018-17422 | DO Dotcms Dotcms | 6.1 | Mar 7 | dotCMS before 5.0.2 has open redirects via the html/common/forward_js.jsp FORWARD_URL parameter or the html/portlet/ext/common/page_preview_popup.jsp hostname parameter |
| CVE-2018-19554 | DO Dotcms Dotcms | 5.4 | Nov 26 | An issue was discovered in Dotcms through 5.0.3 |
| CVE-2018-16980 | DO Dotcms Dotcms | 6.1 | Sep 12 | dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters |
| CVE-2017-3189 | DO Dotcms Dotcms | 8.1 | Jul 24 | The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to arbitrary file upload |
| CVE-2017-3188 | DO Dotcms Dotcms | 6.5 | Jul 24 | The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to path traversal |
| CVE-2017-3187 | DO Dotcms Dotcms | 8.8 | Jul 24 | The dotCMS administration panel, versions 3.7.1 and earlier, are vulnerable to cross-site request forgery |
| CVE-2016-10008 | DO Dotcms Dotcms | 7.2 | Feb 19 | SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute… |
| CVE-2016-10007 | DO Dotcms Dotcms | 7.2 | Feb 19 | SQL injection vulnerability in the "Marketing > Forms" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute arbitrary SQL… |
| CVE-2017-15219 | DO Dotcms Dotcms | 5.4 | Oct 10 | The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting (XSS) affecting a vanity-urls Title field, a containers Description field, and a templates Description… |
| CVE-2017-11466 | DO Dotcms Dotcms | 7.2 | Jul 20 | Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to… |
| CVE-2017-6003 | DO Dotcms Dotcms | 6.1 | Mar 27 | dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields |
| CVE-2017-5344 | DO Dotcms Dotcms | 9.8 | Feb 17 | An issue was discovered in dotCMS through 3.6.1 |
| CVE-2017-5877 | DO Dotcms Dotcms | 6.1 | Feb 6 | XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter |
| CVE-2017-5876 | DO Dotcms Dotcms | 6.1 | Feb 6 | XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter |
| CVE-2017-5875 | DO Dotcms Dotcms | 5.4 | Feb 6 | XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter |
| CVE-2016-2355 | DO Dotcms Dotcms | 9.8 | Dec 19 | SQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to execute arbitrary SQL commands via the stName parameter to api/content/save/1 |
| CVE-2016-8908 | DO Dotcms Dotcms | 8.8 | Nov 14 | SQL injection vulnerability in the "Site Browser > HTML pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the… |
| CVE-2016-8907 | DO Dotcms Dotcms | 8.8 | Nov 14 | SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the… |
| CVE-2016-8906 | DO Dotcms Dotcms | 8.8 | Nov 14 | SQL injection vulnerability in the "Site Browser > Links pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the… |
| CVE-2016-8905 | DO Dotcms Dotcms | 8.8 | Nov 14 | SQL injection vulnerability in the JSONTags servlet in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the sort parameter |
| CVE-2016-8904 | DO Dotcms Dotcms | 8.8 | Nov 14 | SQL injection vulnerability in the "Site Browser > Containers pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the… |
| CVE-2016-8903 | DO Dotcms Dotcms | 8.8 | Nov 14 | SQL injection vulnerability in the "Site Browser > Templates pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the… |
| CVE-2016-8902 | DO Dotcms Dotcms | 9.8 | Nov 14 | SQL injection vulnerability in the categoriesServlet servlet in dotCMS before 3.3.1 allows remote not authenticated attackers to execute arbitrary SQL commands via the sort… |
| CVE-2016-8600 | DO Dotcms Dotcms | 7.5 | Oct 28 | In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later |
| CVE-2016-4803 | DO Dotcms Dotcms | 7.5 | Jun 30 | CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject |
| CVE-2016-4040 | DO Dotcms Dotcms | 7.2 | Apr 19 | SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter |
| CVE-2016-3688 | DO Dotcms Dotcms | 6.5 | Apr 19 | SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to… |
| CVE-2016-3972 | DO Dotcms Dotcms | 2.7 | Apr 18 | Directory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote authenticated administrators to read arbitrary files via a |
| CVE-2016-3971 | DO Dotcms Dotcms | 4.8 | Apr 18 | Cross-site scripting (XSS) vulnerability in lucene_search.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to… |
| CVE-2013-3484 | DO Dotcms Dotcms | – | Apr 2 | Multiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) _loginUserName parameter to… |
| CVE-2012-1826 | DO Dotcms Dotcms | – | Jun 8 | dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template |
| CVE-2008-3708 | DO Dotcms Dotcms | – | Aug 19 | Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a |
| CVE-2008-2397 | DO Dotcms Dotcms | – | May 21 | Cross-site scripting (XSS) vulnerability in search-results.dot in dotCMS 1.x allows remote attackers to inject arbitrary web script or HTML via the search_query parameter |