Known vulnerabilities in SeaCMS

Software: SeaCMS
Software CPE: cpe:2.3:a:seacms_.net:seacms:*:*:*:*:*:*:*:*
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SeaCMS SeaCMS is affected by 17 known vulnerabilities: 6 high, 2 medium, 9 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU36130 - Credentials Management
CVE-2019-8418
CWE-255 High
No
No
- 17.02.2019 SB2019021704
#VU15942 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17062
CWE-79 Low
No
No
- 18.11.2018 SB2018111801
#VU15941 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-16822
CWE-89 Low
No
No
- 18.11.2018 SB2018111801
#VU15939 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17321
CWE-79 Low
No
No
- 18.11.2018 SB2018111801
#VU15937 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19350
CWE-79 Low
No
No
- 18.11.2018 SB2018111801
#VU15936 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-19349
CWE-89 Low
No
No
- 18.11.2018 SB2018111801
#VU36731 - Server-Side Request Forgery (SSRF)
CVE-2018-16444
CWE-918 High
No
No
- 04.09.2018 SB2018053114
#VU36746 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-16343
CWE-94 Medium
No
No
- 02.09.2018 SB2018053114
#VU36747 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-16348
CWE-79 Low
No
No
- 02.09.2018 SB2018053114
#VU36796 - Cross-Site Request Forgery (CSRF)
CVE-2018-14910
CWE-352 High
No
No
- 03.08.2018 SB2018053114
#VU36829 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14517
CWE-79 Low
No
No
- 23.07.2018 SB2018053114
#VU36842 - Cross-Site Request Forgery (CSRF)
CVE-2018-14421
CWE-352 High
No
No
- 20.07.2018 SB2018053114
#VU36937 - Cross-Site Request Forgery (CSRF)
CVE-2018-13444
CWE-352 High
No
No
- 08.07.2018 SB2018053114
#VU36938 - Cross-Site Request Forgery (CSRF)
CVE-2018-13445
CWE-352 High
No
No
- 08.07.2018 SB2018053114
#VU37029 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-12431
CWE-79 Low
No
No
- 15.06.2018 SB2018053114
#VU37097 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-11583
CWE-79 Low
No
No
- 31.05.2018 SB2018053114
#VU37762 - Improper input validation
CVE-2017-17561
CWE-20 Medium
No
No
- 12.12.2017 SB2017121223