accela records
6 published records for vendor accela.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-20 Improper Input Validation1
- CWE-284 Improper Access Control1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2016-5661No exploit | Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated usersaccela · civic platform citizen access portal · CWE-284 | High8.8 | — | 2.6% | Jul 15, 2016 |
36Monitor | CVE-2025-57644No exploit | Accela Automation Platform 22.2.3.0.230103 contains multiple vulnerabilities in the Test Script feature.accela · automation platform · CWE-20 | Critical9.1 | — | 0.7% | Sep 19, 2025 |
28Monitor | CVE-2021-34369Proof of concept | portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via aaccela · civic platform | Medium6.5 | — | 8.2% | Jun 9, 2021 |
27Monitor | CVE-2021-34370Proof of concept | Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS.accela · civic platform · CWE-79 | Medium6.1 | — | 10.0% | Jun 9, 2021 |
27Monitor | CVE-2021-33904Proof of concept | In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS.accela · civic platform · CWE-79 | Medium6.1 | — | 10.0% | Jun 7, 2021 |
24Monitor | CVE-2016-5660No exploit | Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to iaccela · civic platform · CWE-79 | Medium6.1 | — | 1.7% | Jul 15, 2016 |
- CVE-2016-566136Monitor
Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users
HighCVSS 8.8No exploitEPSS 3%accela · civic platform citizen access portalJul 15, 2016
- CVE-2025-5764436Monitor
Accela Automation Platform 22.2.3.0.230103 contains multiple vulnerabilities in the Test Script feature.
CriticalCVSS 9.1No exploitEPSS 1%accela · automation platformSep 19, 2025
- CVE-2021-3436928Monitor
portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a
MediumCVSS 6.5Proof of conceptEPSS 8%accela · civic platformJun 9, 2021
- CVE-2021-3437027Monitor
Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS.
MediumCVSS 6.1Proof of conceptEPSS 10%accela · civic platformJun 9, 2021
- CVE-2021-3390427Monitor
In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS.
MediumCVSS 6.1Proof of conceptEPSS 10%accela · civic platformJun 7, 2021
- CVE-2016-566024Monitor
Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to i
MediumCVSS 6.1No exploitEPSS 2%accela · civic platformJul 15, 2016