İçeriğe atla
Noroxi

Alkacon kayıtları

alkacon üreticisine ait 36 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%63,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 21
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

36 kayıt
  • CVE-2018-8811
    36İzleyin

    Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts/user_role.jsp in OpenCMS 10.5.3 allows remote attackers t

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    alkacon · opencms20 Mar 2018

  • CVE-2019-11819
    31İzleyin

    Alkacon OpenCMS v10.5.4 and before is affected by CSV (aka Excel Macro) Injection in the module New User (/opencms/system/workplace/admin/ac

    YüksekCVSS 7,8İstismar yokEPSS %1

    alkacon · opencms8 May 2019

  • CVE-2006-3935
    27İzleyin

    system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allow

    OrtaCVSS 6,5İstismar yokEPSS %2

    alkacon · opencms31 Tem 2006

  • CVE-2005-4475
    27İzleyin

    Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via uns

    OrtaCVSS 6,8İstismar yokEPSS %1

    alkacon · opencms22 Ara 2005

  • CVE-2021-3312
    26İzleyin

    An XML external entity (XXE) vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges

    OrtaCVSS 6,5İstismar yokEPSS %1

    alkacon · opencms8 Eki 2021

  • CVE-2024-42699
    26İzleyin

    Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript pay

    OrtaCVSS 6,5İstismar yokEPSS %0

    alkacon · opencms21 Nis 2025

  • CVE-2019-13236
    25İzleyin

    In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface.

    OrtaCVSS 6,1Kavram kanıtıEPSS %3

    alkacon · opencms27 Ağu 2019

  • CVE-2019-13234
    25İzleyin

    In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.

    OrtaCVSS 6,1Kavram kanıtıEPSS %3

    alkacon · opencms apollo template27 Ağu 2019

  • CVE-2019-13235
    25İzleyin

    In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

    OrtaCVSS 6,1Kavram kanıtıEPSS %3

    alkacon · opencms apollo template27 Ağu 2019

  • CVE-2023-6379
    25İzleyin

    Cross-site Scripting in Alkacon Software OpenCms

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    alkacon · opencms13 Ara 2023

  • CVE-2024-5521
    25İzleyin

    Cross-Site Scripting stored in Alkacon OpenCMS

    OrtaCVSS 6,4İstismar yokEPSS %0

    alkacon · opencms30 May 2024

  • CVE-2023-6380
    24İzleyin

    Open Redirect in Alkacon Software OpenCms

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    alkacon · opencms13 Ara 2023

  • CVE-2019-11818
    24İzleyin

    Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/

    OrtaCVSS 6,1İstismar yokEPSS %1

    alkacon · opencms8 May 2019

  • CVE-2023-37602
    24İzleyin

    An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary

    OrtaCVSS 6,1İstismar yokEPSS %1

    alkacon · opencms20 Tem 2023

  • CVE-2021-25968
    21İzleyin

    OpenCMS - Stored Cross-Site Scripting (XSS) in Sitemap

    OrtaCVSS 5,4İstismar yokEPSS %1

    alkacon · opencms19 Eki 2021

  • CVE-2023-31544
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in alkacon-OpenCMS v11.0.0.0 allows attackers to execute arbitrary web scripts or HTML via

    OrtaCVSS 5,4İstismar yokEPSS %0

    alkacon · opencms16 May 2023

  • CVE-2024-5520
    21İzleyin

    Cross-Site Scripting stored in Alkacon OpenCMS

    OrtaCVSS 5,4İstismar yokEPSS %0

    alkacon · opencms30 May 2024

  • CVE-2024-41446
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a c

    OrtaCVSS 5,4İstismar yokEPSS %0

    alkacon · opencms21 Nis 2025

  • CVE-2024-41447
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a c

    OrtaCVSS 5,4İstismar yokEPSS %0

    alkacon · opencms18 Nis 2025

  • CVE-2026-2736
    20İzleyin

    Reflected Cross-Site Scripting (XSS) vulnerability in Alkacon's OpenCms

    OrtaCVSS 5,1İstismar yokEPSS %0

    alkacon · opencms19 Şub 2026

  • CVE-2026-2735
    20İzleyin

    Stored Cross-Site Scripting (XSS) vulnerability in Alkacon's OpenCms

    OrtaCVSS 5,1İstismar yokEPSS %0

    alkacon · opencms19 Şub 2026

  • CVE-2019-13237
    19İzleyin

    In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access serve

    OrtaCVSS 4,3Kavram kanıtıEPSS %7

    alkacon · opencms apollo template27 Ağu 2019

  • CVE-2015-2351
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms 9.5.1 and earlier allow remote attackers to inject arbitrary web scri

    OrtaCVSS 4,3İstismar yokEPSS %2

    alkacon · opencms19 Mar 2015

  • CVE-2013-4600
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or

    OrtaCVSS 4,3İstismar yokEPSS %2

    alkacon · opencms9 Ağu 2013

  • CVE-2018-8815
    18İzleyin

    Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows remote attackers to inject arbitrary web s

    OrtaCVSS 4,6Kavram kanıtıEPSS %1

    alkacon · opencms20 Mar 2018