ibexa records
11 published records for vendor ibexa.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 81.8%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-203 Observable Discrepancy1
- CWE-269 Improper Privilege Management1
- CWE-284 Improper Access Control1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-639 Authorization Bypass Through User-Controlled Key1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2022-25337No exploit | Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames.ibexa · ez platform kernel · CWE-74 | Critical9.8 | — | 1.1% | Feb 18, 2022 |
39Monitor | CVE-2022-48367No exploit | An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28.ibexa · digital experience platform · CWE-862 | Critical9.8 | — | 0.7% | Mar 12, 2023 |
30Monitor | CVE-2025-70363No exploit | Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access ibexa · ez platform · CWE-284 | High7.5 | — | 0.2% | Mar 6, 2026 |
28Monitor | CVE-2022-48365No exploit | An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26.ibexa · digital experience platform · CWE-269 | High7.2 | — | 0.9% | Mar 12, 2023 |
28Monitor | CVE-2024-43369No exploit | Persistent Cross-site Scripting in Ibexa RichText Field Typeibexa · fieldtype-richtext · CWE-79 | High7.2 | — | 0.4% | Aug 15, 2024 |
24Monitor | CVE-2021-46875No exploit | An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1.ibexa · ez platform kernel · CWE-79 | Medium6.1 | — | 0.4% | Mar 12, 2023 |
21Monitor | CVE-2022-41876Proof of concept | ezplatform-graphql GraphQL queries can expose password hashesibexa · ezplatform-graphql · CWE-200 | Medium5.3 | — | 1.4% | Nov 10, 2022 |
21Monitor | CVE-2022-25336No exploit | Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks agaiibexa · ez platform kernel · CWE-639 | Medium5.3 | — | 0.7% | Feb 18, 2022 |
21Monitor | CVE-2021-46876No exploit | An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1.ibexa · ez platform kernel · CWE-203 | Medium5.3 | — | 0.5% | Mar 12, 2023 |
21Monitor | CVE-2020-23065No exploit | Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attacibexa · ezpublish legacy · CWE-79 | Medium5.4 | — | 0.5% | Jun 26, 2023 |
14Monitor | CVE-2022-48366No exploit | An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19.ibexa · commerce · CWE-362 | Low3.7 | — | 0.5% | Mar 12, 2023 |
- CVE-2022-2533739Monitor
Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames.
CriticalCVSS 9.8No exploitEPSS 1%ibexa · ez platform kernelFeb 18, 2022
- CVE-2022-4836739Monitor
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28.
CriticalCVSS 9.8No exploitEPSS 1%ibexa · digital experience platformMar 12, 2023
- CVE-2025-7036330Monitor
Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access
HighCVSS 7.5No exploitEPSS 0%ibexa · ez platformMar 6, 2026
- CVE-2022-4836528Monitor
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26.
HighCVSS 7.2No exploitEPSS 1%ibexa · digital experience platformMar 12, 2023
- CVE-2024-4336928Monitor
Persistent Cross-site Scripting in Ibexa RichText Field Type
HighCVSS 7.2No exploitEPSS 0%ibexa · fieldtype-richtextAug 15, 2024
- CVE-2021-4687524Monitor
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1.
MediumCVSS 6.1No exploitEPSS 0%ibexa · ez platform kernelMar 12, 2023
- CVE-2022-4187621Monitor
ezplatform-graphql GraphQL queries can expose password hashes
MediumCVSS 5.3Proof of conceptEPSS 1%ibexa · ezplatform-graphqlNov 10, 2022
- CVE-2022-2533621Monitor
Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks agai
MediumCVSS 5.3No exploitEPSS 1%ibexa · ez platform kernelFeb 18, 2022
- CVE-2021-4687621Monitor
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1.
MediumCVSS 5.3No exploitEPSS 1%ibexa · ez platform kernelMar 12, 2023
- CVE-2020-2306521Monitor
Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attac
MediumCVSS 5.4No exploitEPSS 0%ibexa · ezpublish legacyJun 26, 2023
- CVE-2022-4836614Monitor
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19.
LowCVSS 3.7No exploitEPSS 0%ibexa · commerceMar 12, 2023