İçeriğe atla
Noroxi

umbraco kayıtları

umbraco üreticisine ait 70 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %1,4
Pre-auth RCE
6
Düzeltme kaydı olan
%74,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

70 kayıt
  • CVE-2020-5810
    40Planlayın

    A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current.

    OrtaCVSS 5,4İstismar yokEPSS %61

    umbraco · umbraco cms30 Ara 2020

  • CVE-2012-1301
    40Planlayın

    The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter.

    KritikCVSS 9,8İstismar yokEPSS %3

    umbraco · umbraco cms13 Nis 2017

  • CVE-2014-10074
    40Planlayın

    Umbraco before 7.2.0 has a remote PHP code execution vulnerability because Umbraco.Web.UI/config/umbracoSettings.Release.config does not blo

    KritikCVSS 9,8İstismar yokEPSS %2

    umbraco · umbraco cms27 Ağu 2018

  • CVE-2021-37334
    40Planlayın

    Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code execution

    KritikCVSS 9,8İstismar yokEPSS %2

    umbraco · forms25 Ağu 2021

  • CVE-2025-67288
    40Planlayın

    An arbitrary file upload vulnerability in Umbraco CMS v16.3.3 allows attackers to execute arbitrary code by uploading a crafted PDF file.

    KritikCVSS 10,0İstismar yokEPSS %0

    umbraco · umbraco cms22 Ara 2025

  • CVE-2019-13957
    39İzleyin

    In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    umbraco · umbraco2 Eki 2019

  • CVE-2021-33224
    39İzleyin

    File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and a

    KritikCVSS 9,8İstismar yokEPSS %0

    umbraco · umbraco forms24 Şub 2023

  • CVE-2023-37267
    39İzleyin

    Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions

    KritikCVSS 9,8İstismar yokEPSS %0

    umbraco · umbraco cms13 Tem 2023

  • CVE-2012-10054
    38İzleyin

    Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE

    KritikCVSS 9,3SilahlaştırılmışEPSS %4

    umbraco · umbraco cms13 Ağu 2025

  • CVE-2020-9471
    36İzleyin

    Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

    YüksekCVSS 8,8İstismar yokEPSS %2

    umbraco · umbraco cms16 Mar 2020

  • CVE-2015-8813
    35İzleyin

    The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attacke

    YüksekCVSS 8,2Kavram kanıtıEPSS %11

    umbraco · umbraco3 Mar 2017

  • CVE-2025-32017
    35İzleyin

    Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users

    YüksekCVSS 8,8İstismar yokEPSS %0

    umbraco · umbraco cms8 Nis 2025

  • CVE-2015-8814
    35İzleyin

    Umbraco before 7.4.0 allows remote attackers to bypass anti-forgery security measures and conduct cross-site request forgery (CSRF) attacks

    YüksekCVSS 8,8İstismar yokEPSS %0

    umbraco · umbraco3 Mar 2017

  • CVE-2024-47819
    34İzleyin

    Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section

    YüksekCVSS 8,7İstismar yokEPSS %0

    umbraco · umbraco cms22 Eki 2024

  • CVE-2013-4793
    30İzleyin

    The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does no

    YüksekCVSS 7,5İstismar yokEPSS %1

    umbraco · umbraco cms27 Ara 2014

  • CVE-2022-22690
    30İzleyin

    Umbraco Remote ApplicationURL Overwrite

    YüksekCVSS 7,5İstismar yokEPSS %1

    umbraco · umbraco cms18 Oca 2022

  • CVE-2020-7685
    30İzleyin

    This affects all versions of package UmbracoForms.

    YüksekCVSS 7,5İstismar yokEPSS %0

    umbraco · umbraco forms28 Tem 2020

  • CVE-2025-68924
    30İzleyin

    In Umbraco UmbracoForms through 8.13.16, an authenticated attacker can supply a malicious WSDL (aka Webservice) URL as a data source for rem

    YüksekCVSS 7,5İstismar yokEPSS %0

    umbraco · umbraco forms16 Oca 2026

  • CVE-2020-5811
    29İzleyin

    An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in a

    OrtaCVSS 6,5Kavram kanıtıEPSS %9

    umbraco · umbraco cms30 Ara 2020

  • CVE-2019-25137
    29İzleyin

    Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:script in an xsltSele

    YüksekCVSS 7,2Kavram kanıtıEPSS %4

    umbraco · umbraco cms18 May 2023

  • CVE-2022-22691
    29İzleyin

    Umbraco Password Reset URL Poison

    YüksekCVSS 7,4İstismar yokEPSS %1

    umbraco · umbraco cms18 Oca 2022

  • CVE-2026-31834
    28İzleyin

    Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks

    YüksekCVSS 7,2İstismar yokEPSS %0

    umbraco · umbraco cms10 Mar 2026

  • CVE-2020-9472
    27İzleyin

    Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.

    OrtaCVSS 6,5İstismar yokEPSS %2

    umbraco · umbraco cms16 Mar 2020

  • CVE-2024-10761
    27İzleyin

    Umbraco CMS Dashboard frame cross site scripting

    OrtaCVSS 6,9İstismar yokEPSS %0

    umbraco · umbraco cms4 Kas 2024

  • CVE-2021-47776
    27İzleyin

    Umbraco v8.14.1 - 'baseUrl' SSRF

    OrtaCVSS 6,9İstismar yokEPSS %0

    umbraco · umbraco cms15 Oca 2026