Skip to content
Noroxi

acquia records

43 published records for vendor acquia.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
83.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 21
  5. 22
  6. 24
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

43 records
  • CVE-2022-25772
    43Plan

    A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable

    MediumCVSS 6.1No exploitEPSS 63%

    acquia · mauticJun 20, 2022

  • CVE-2024-47051
    40Plan

    Remote Code Execution & File Deletion in Asset Uploads

    CriticalCVSS 9.9Proof of conceptEPSS 1%

    acquia · mauticFeb 26, 2025

  • CVE-2020-35125
    39Monitor

    A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaSc

    CriticalCVSS 9.6No exploitEPSS 2%

    acquia · mauticFeb 9, 2021

  • CVE-2020-35124
    39Monitor

    A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaS

    CriticalCVSS 9.6No exploitEPSS 2%

    acquia · mauticJan 28, 2021

  • CVE-2020-35128
    37Monitor

    Mautic before 3.2.4 is affected by stored XSS.

    CriticalCVSS 9.0No exploitEPSS 1%

    acquia · mauticJan 19, 2021

  • CVE-2021-27915
    36Monitor

    XSS Cross-site Scripting Stored (XSS) - Description field

    CriticalCVSS 9.0No exploitEPSS 0%

    acquia · mauticSep 17, 2024

  • CVE-2022-25769
    36Monitor

    Improper regex in htaccess file

    CriticalCVSS 9.1No exploitEPSS 0%

    acquia · mauticSep 18, 2024

  • CVE-2017-8874
    35Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for

    HighCVSS 8.8No exploitEPSS 0%

    acquia · mauticMay 10, 2017

  • CVE-2026-3105
    35Monitor

    SQL Injection in Contact Activity API Sorting

    HighCVSS 8.8No exploitEPSS 0%

    acquia · mauticFeb 24, 2026

  • CVE-2017-1000489
    32Monitor

    Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address

    HighCVSS 8.1No exploitEPSS 1%

    mautic · mauticJan 3, 2018

  • CVE-2021-27916
    32Monitor

    Relative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder)

    HighCVSS 8.1No exploitEPSS 0%

    acquia · mauticSep 17, 2024

  • CVE-2025-14472
    32Monitor

    Acquia Content Hub - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-125

    HighCVSS 8.1No exploitEPSS 0%

    acquia · acquia content hubJan 28, 2026

  • CVE-2015-8754
    30Monitor

    The Mollom module 6.x-2.7 before 6.x-2.15 for Drupal allows remote attackers to bypass intended access restrictions and modify the mollom bl

    HighCVSS 7.5No exploitEPSS 1%

    acquia · mollomJan 8, 2016

  • CVE-2024-47053
    30Monitor

    Improper Authorization in Reporting API

    HighCVSS 7.7No exploitEPSS 0%

    acquia · mauticFeb 26, 2025

  • CVE-2025-9954
    30Monitor

    Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

    HighCVSS 7.5No exploitEPSS 0%

    acquia · damOct 30, 2025

  • CVE-2022-25770
    30Monitor

    Insufficient authentication in upgrade flow

    HighCVSS 7.5No exploitEPSS 0%

    acquia · mauticSep 18, 2024

  • CVE-2022-25775
    28Monitor

    SQL Injection in dynamic Reports

    HighCVSS 7.2No exploitEPSS 0%

    acquia · mauticSep 18, 2024

  • CVE-2017-1000490
    26Monitor

    Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Fileman

    MediumCVSS 6.5No exploitEPSS 1%

    mautic · mauticJan 3, 2018

  • CVE-2022-25777
    26Monitor

    Server-Side Request Forgery in Asset section

    MediumCVSS 6.5No exploitEPSS 0%

    acquia · mauticSep 18, 2024

  • CVE-2022-25776
    26Monitor

    Sensitive Data Exposure due to inadequate user permission settings

    MediumCVSS 6.5No exploitEPSS 0%

    acquia · mauticSep 18, 2024

  • CVE-2022-25768
    26Monitor

    Improper Access Control in UI upgrade process

    MediumCVSS 6.5No exploitEPSS 0%

    acquia · mauticSep 18, 2024

  • CVE-2021-27909
    25Monitor

    XSS vulnerability on password reset page

    MediumCVSS 6.1Proof of conceptEPSS 4%

    acquia · mauticAug 30, 2021

  • CVE-2018-11198
    24Monitor

    An issue was discovered in Mautic 2.13.1.

    MediumCVSS 6.1No exploitEPSS 0%

    acquia · mauticSep 6, 2019

  • CVE-2017-1000488
    24Monitor

    Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters

    MediumCVSS 6.1No exploitEPSS 0%

    mautic · mauticJan 3, 2018

  • CVE-2018-11200
    24Monitor

    An issue was discovered in Mautic 2.13.1.

    MediumCVSS 6.1No exploitEPSS 0%

    acquia · mauticSep 20, 2019