Dotcms Core vulnerabilities

• dotcms core Unauthenticated SQL Injection in dotCMS Publish Audit API CVE-2026-8054 Public exploit 10.0 CriticalMay 27, 2026
• dotcms core In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via... CVE-2024-4447 9.9 CriticalJuly 26, 2024
• dotcms core, dotcms +1 more The "reset password" login page accepted an HTML injection via URL parameters. This has already... CVE-2024-3938 5.4 MediumJuly 25, 2024
• dotcms, dotcms core +1 more Database Credential Exposure in the Logs CVE-2024-3165 4.5 MediumApril 1, 2024
• dotcms, dotcms core +1 more In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is... CVE-2024-3164 4.5 MediumApril 1, 2024
• dotcms, dotcms core +1 more CNA SHORTNAME: dotCMSORG UUID: 5b9d93f2-25c7-46b4-ab60-d201718c9dd8 CVE-2023-3042 5.3 MediumOctober 17, 2023