Ibexa Ez Platform vulnerabilities

• ibexa ez platform Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x... CVE-2025-70363 7.5 HighMarch 6, 2026
• ibexa ez platform, kernel, commerce +4 more +6 more Timing attack in eZ Platform Ibexa CVE-2022-48366 Fix available 3.7 LowMarch 12, 2023
• ibexa ez platform, digital experience platform, ez platform kernel +2 more Company admin role gives excessive privileges in eZ Platform Ibexa CVE-2022-48365 Fix available 7.2 HighMarch 12, 2023
• ibexa kernel, digital experience platform, ez platform kernel +2 more +4 more Object state limitation has no effect CVE-2022-48367 Fix available 9.8 CriticalApril 29, 2022
• ibexa ez platform kernel Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel CVE-2022-25336 Fix available 5.3 MediumFebruary 18, 2022
• ibexa ez platform kernel Code injection in ezsystems/ezpublish-kernel CVE-2022-25337 Fix available 9.8 CriticalFebruary 18, 2022
• ibexa ez platform kernel Duplicate Advisory: Cross Site Scripting in eZ Platform Ibexa Kernel CVE-2021-46875 Fix available 6.1 MediumMarch 19, 2021
• ibexa ez platform kernel Duplicate Advisory: User account enumeration in eZ Publish Ibexa Kernel CVE-2021-46876 Fix available 5.3 MediumMarch 11, 2021