Alkacon vulnerabilities

Products

• Opencms 32
• Opencms Apollo Template 3
• Open Cms 2

Newest

• alkacon opencms Reflected Cross-Site Scripting (XSS) vulnerability in Alkacon's OpenCms CVE-2026-2736 5.1 MediumFebruary 19, 2026
• alkacon opencms Stored Cross-Site Scripting (XSS) vulnerability in Alkacon's OpenCms CVE-2026-2735 5.1 MediumFebruary 19, 2026
• alkacon opencms OpenCMS Cross-Site Scripting vulnerability CVE-2024-42699 6.5 MediumApril 21, 2025
• alkacon opencms OpenCMS cross-site scripting (XSS) vulnerability CVE-2024-41446 5.4 MediumApril 21, 2025
• alkacon opencms Alkacon OpenCMS stored cross-site scripting (XSS) vulnerability CVE-2024-41447 5.4 MediumApril 18, 2025
• alkacon opencms Cross-Site Scripting stored in Alkacon OpenCMS CVE-2024-5521 6.4 MediumMay 30, 2024
• alkacon opencms Cross-Site Scripting stored in Alkacon OpenCMS CVE-2024-5520 Fix available 6.4 MediumMay 30, 2024
• alkacon open cms, opencms +1 more Open Redirect in Alkacon Software OpenCms CVE-2023-6380 6.1 MediumDecember 13, 2023
• alkacon open cms, opencms +1 more Cross-site Scripting in Alkacon Software OpenCms CVE-2023-6379 Fix available 5.4 MediumDecember 13, 2023
• alkacon opencms Alkacon OpenCMS arbitrary file upload vulnerability CVE-2023-37602 6.1 MediumJuly 20, 2023
• alkacon opencms alkacon-OpenCMS vulnerable to stored Cross-site Scripting CVE-2023-31544 Fix available 5.4 MediumMay 16, 2023
• alkacon opencms, org.opencms opencms-core +1 more OpenCMS - Stored Cross-Site Scripting (XSS) in Sitemap CVE-2021-25968 5.4 MediumOctober 19, 2021
• alkacon opencms XML External Entity Reference in org.opencms:opencms-core CVE-2021-3312 Fix available 6.5 MediumOctober 8, 2021
• alkacon opencms apollo template Local file inclusion allows unauthorized access to internal resources in Alkacon OpenCms CVE-2019-13237 Public exploitFix available 4.3 MediumAugust 27, 2019
• alkacon opencms XSS issues in the management interface CVE-2019-13236 Public exploitFix available 6.1 MediumAugust 27, 2019
• alkacon opencms apollo template XSS in login form CVE-2019-13235 Public exploitFix available 6.1 MediumAugust 27, 2019
• alkacon opencms apollo template XSS in search engine CVE-2019-13234 Public exploitFix available 6.1 MediumAugust 27, 2019
• alkacon opencms Alkacon OpenCMS CSV Injection via New User module CVE-2019-11819 Fix available 7.8 HighMay 8, 2019
• alkacon opencms Alkacon OpenCMS XSS via New User module CVE-2019-11818 Fix available 6.1 MediumMay 8, 2019
• alkacon opencms Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows... CVE-2018-8815 Public exploit 4.6 MediumMarch 20, 2018
• alkacon opencms ** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts... CVE-2018-8811 Public exploitDisputed 8.8 HighMarch 20, 2018
• alkacon opencms Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters CVE-2015-2351 Fix available 4.3 MediumMarch 19, 2015
• alkacon opencms Alkacon OpenCMS XSS via title and requestedResource parameters CVE-2013-4600 Fix available 4.3 MediumAugust 9, 2013
• alkacon oamp comments Multiple cross-site scripting (XSS) vulnerabilities in OpenCMS OAMP Comments Module 1.0.1 allow... CVE-2009-4505 4.3 MediumMarch 26, 2010
• alkacon opencms Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp CVE-2008-1753 Fix available 4.3 MediumApril 11, 2008
• alkacon opencms Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter CVE-2008-1510 Public exploitFix available 4.3 MediumMarch 25, 2008
• alkacon opencms Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter CVE-2008-1301 Public exploitFix available 4.0 MediumMarch 12, 2008
• alkacon opencms Alkacon Open CMS XSS via Logfile Viewer Settings function CVE-2008-1300 Public exploitFix available 4.3 MediumMarch 12, 2008
• alkacon opencms Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp CVE-2008-1045 Public exploitFix available 4.3 MediumFebruary 27, 2008
• alkacon opencms Alkacon OpenCms Exposes JSP Source Code CVE-2006-3936 Fix available 4.0 MediumJuly 31, 2006
• alkacon opencms Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp CVE-2006-3935 Fix available 6.5 MediumJuly 31, 2006
• alkacon opencms Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter CVE-2006-3934 Fix available 4.0 MediumJuly 31, 2006
• alkacon opencms Alkacon OpenCms XSS via unsanitized message body CVE-2006-3933 Fix available 3.5 LowJuly 31, 2006
• alkacon opencms Alkacon OpenCms XSS via query parameter in a search action CVE-2006-2571 Fix available 2.6 LowMay 24, 2006
• alkacon opencms Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to... CVE-2005-4475 6.8 MediumDecember 22, 2005
• alkacon opencms Alkacon OpenCms XSS via username during login CVE-2005-4294 Fix available 4.3 MediumDecember 16, 2005