Known vulnerabilities in OpenCMS
Vendor:
Alkacon Software
Software:
OpenCMS
Software CPE:
cpe:2.3:a:alkacon_software:opencms:*:*:*:*:*:*:*:*
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
5.3
Breakdown by Severity Chart
17.0.0
16.0.0
15.0.0
14.0.0
13.0.0
12.0.0
11.0.2
11.0.1
11.0.0.rc
11.0.0.beta.2
11.0.0.beta
11.0.0
10.5.4.4
10.5.4.3
10.5.4.2
10.5.4.1
10.5.4
10.5.3
10.5.2
10.5.1
10.5.0.beta
10.5.0.5
10.5.0.3
10.5.0.2
10.5.0.1
10.5.0
10.0.1
10.0.0.beta4
10.0.0.beta3
10.0.0.beta.2
10.0.0.beta
10.0.0.alpha.2
10.0.0.alpha.1u
10.0.0.alpha.1
10.0.0
9.5.3.13
9.5.3.12
9.5.3.11
9.5.3.10
9.5.3.9
9.5.3.8
9.5.3.7
9.5.3.6
9.5.3.5
9.5.3.4
9.5.3.3
9.5.3.2
9.5.3.1
9.5.3
9.5.2
9.5.1
9.5.0
9.0.1
9.0.0.1
9.0.0
8.9.0
8.7.0
8.5.2
8.5.1
8.5.0
8.0.4
8.0.3
8.0.2.1
8.0.2
8.0.1
8.0.0
7.9.2
7.9.1
7.5.4
7.5.3
7.5.2
7.5.1
7.5.0.beta.1
7.5.0
7.3.0
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0.rc.2
7.0.0.rc.1
7.0.0.beta.1
7.0.0.alpha.1
7.0.0
6.5.5
6.5.4
6.5.3
6.5.2
6.5.1
6.5.0
6.3.1
6.3.0
6.2.3
6.2.2
6.2.1
6.2.0
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.9.2
5.9.1
5.7.3
5.7.2
5.7.1
5.5.4
5.5.3
5.5.2
5.5.1
5.3.6
5.3.5
5.3.4
5.3.3
5.3.2
5.3.1
5.1.14
5.1.13
5.1.12
5.1.11
5.1.10
5.1.9
5.1.8
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1.0
5.0.1
5.0.0.rc.2
5.0.0.rc.1
5.0.0.beta.2
5.0.0.beta.1
5.0.0
4.7.18
4.7.16
4.7.15
4.7.14
4.7.13
4.7.12
4.7.11
4.7.10
4.7.9
4.7.8
4.7.7
4.7.6
4.7.5
4.7.4
4.7.3
4.7.2
4.7.1
4.7.0
4.6.1
4.6.0
4.5.36
4.5.35
4.5.34
4.5.33
4.5.32
4.5.31
4.5.29
4.5.28
4.5.27
4.5.26
4.5.23
4.5.22
4.5.21
4.5.20
4.5.19
4.5.18
4.5.17
4.5.16
4.5.15
4.5.14
4.5.13
4.5.12
4.5.11
4.5.10
4.5.9
4.5.8
4.5.7
4.5.6
4.5.5
4.5.4
4.5.3
4.5.0
4.4.6
4.4.5
4.4.4
4.4.3
4.4.2
4.4.1
4.4.0
4.3.43
4.3.42
4.3.41
4.3.40
4.3.34
4.3.33
4.3.30
4.3.27
4.3.25
4.3.23
4.3.22
4.3.21
4.3.20
4.3.19
4.3.18
4.3.17
4.3.16
4.3.15
4.3.14
4.3.13
4.3.12
4.3.9
4.3.7
4.3.6
4.3.4
4.3.3
4.3.1
4.2.2
4.2.1
4.2.0
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU90719 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-5521 |
CWE-79 | Low | 17.0.0 | 03.06.2024 |
SB2024060323 |
||
| #VU90718 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-5520 |
CWE-79 | Low | 17.0.0 | 03.06.2024 |
SB2024060323 |