İçeriğe atla
Noroxi

Openkm kayıtları

openkm üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%6,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

16 kayıt
  • CVE-2022-2131
    39İzleyin

    OpenKM XXE Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    openkm · openkm25 Tem 2022

  • CVE-2019-11445
    32İzleyin

    OpenKM 6.3.2 through 6.3.7 allows an attacker to upload a malicious JSP file into the /okm:root directories and move that file to the home d

    YüksekCVSS 7,2Kavram kanıtıEPSS %14

    openkm · openkm22 Nis 2019

  • CVE-2021-33950
    30İzleyin

    An issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the XMLTextExtractor function.

    YüksekCVSS 7,5İstismar yokEPSS %1

    openkm · openkm17 Şub 2023

  • CVE-2012-2316
    28İzleyin

    Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows r

    OrtaCVSS 6,8Kavram kanıtıEPSS %4

    openkm · openkm9 Eyl 2012

  • CVE-2024-35475
    25İzleyin

    A Cross-Site Request Forgery (CSRF) vulnerability was discovered in OpenKM Community Edition on or before version 6.3.12.

    OrtaCVSS 6,4İstismar yokEPSS %0

    openkm · openkm22 May 2024

  • CVE-2022-3969
    22İzleyin

    OpenKM FileUtils.java getFileExtension temp file

    OrtaCVSS 5,5İstismar yokEPSS %1

    openkm · openkm13 Kas 2022

  • CVE-2014-8957
    21İzleyin

    Cross-site scripting (XSS) vulnerability in OpenKM before 6.4.19 allows remote authenticated users to inject arbitrary web script or HTML vi

    OrtaCVSS 5,4İstismar yokEPSS %1

    openkm · openkm6 Eki 2017

  • CVE-2022-40317
    21İzleyin

    OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    openkm · openkm9 Eyl 2022

  • CVE-2021-3628
    21İzleyin

    OpenKM Document Management Community vulnerable to Cross Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %1

    openkm · openkm30 Ağu 2021

  • CVE-2023-50072
    21İzleyin

    A Stored Cross-Site Scripting (XSS) vulnerability exists in OpenKM version 7.1.40 (dbb6e88) With Professional Extension that allows an authe

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    openkm · openkm12 Oca 2024

  • CVE-2022-47413
    21İzleyin

    Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II") XSS condition.

    OrtaCVSS 5,4İstismar yokEPSS %1

    openkm · openkm7 Şub 2023

  • CVE-2022-47414
    21İzleyin

    If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note"

    OrtaCVSS 5,4İstismar yokEPSS %1

    openkm · openkm7 Şub 2023

  • CVE-2025-57244
    21İzleyin

    OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the user account creation interface.

    OrtaCVSS 5,4İstismar yokEPSS %0

    openkm · openkm5 Kas 2025

  • CVE-2008-2226
    20İzleyin

    Unspecified vulnerability in the export feature in OpenKM before 2.0 allows remote attackers to export arbitrary documents via unspecified v

    OrtaCVSS 5,0İstismar yokEPSS %1

    openkm · openkm14 May 2008

  • CVE-2012-2315
    18İzleyin

    admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remo

    OrtaCVSS 4,0Kavram kanıtıEPSS %6

    openkm · openkm9 Eyl 2012

  • CVE-2014-9017
    15İzleyin

    Cross-site scripting (XSS) vulnerability in OpenKM before 6.4.19 (build 23338) allows remote authenticated users to inject arbitrary web scr

    DüşükCVSS 3,5İstismar yokEPSS %2

    openkm · openkm11 Mar 2015