Skip to contentDotcms vulnerabilities
Newest
- dotcmsSQL injection vulnerability in the categoriesServlet servlet in dotCMS before 3.3.1 allows remote...CVE-2016-89029.8 Critical
- dotcmsIn dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct...CVE-2016-86007.5 High
- dotcmsCRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote...CVE-2016-48037.5 High
- dotcmsSQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote...CVE-2016-40407.2 High
- dotcmsSQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute...CVE-2016-36886.5 Medium
- dotcmsDirectory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote...CVE-2016-39722.7 Low
- dotcmsCross-site scripting (XSS) vulnerability in lucene_search.jsp in dotCMS before 3.5.1 allows...CVE-2016-39714.8 Medium
- dotcmsMultiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers...CVE-2013-34844.3 Medium
- dotcmsdotCMS allows remote authenticated users to execute arbitrary Java codeCVE-2012-1826Fix available6.0 Medium
- dotcmsMultiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read...CVE-2008-3708Public exploit4.3 Medium
- dotcmsCross-site scripting (XSS) vulnerability in search-results.dot in dotCMS 1.x allows remote...CVE-2008-23974.3 Medium