Skip to content
OpenAdvisories

Vendor

Allegra

24 known vulnerabilities.

Allegra at a glance

Last 12 months
2
Critical · all time
7
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 2 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202620
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202510
Sep 202500
Aug 202500
Jul 202500
Jun 202521
May 202510
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Allegra 24
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Medium 4.6
    CVE-2026-11443

    Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability

    Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to execute arbitrary script on affected installations of Allegra. User interaction is required to exploit this vulnerability in tha…

    Allegra Allegra
  • Medium 6.5
    CVE-2026-11442

    Allegra exportReport Directory Traversal Information Disclosure Vulnerability

    Allegra exportReport Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is required to exploit this vulnerability. The spe…

    Allegra Allegra
  • Medium 4.9
    CVE-2025-11466

    Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability

    Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is required to exploit this vulnerability. The…

    Allegra Allegra
  • Critical 9.8
    CVE-2025-6216 EPSS 48%

    Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability

    Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The sp…

    Allegra Allegra
  • High 7.2
    CVE-2025-3485

    Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability

    Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specif…

    Allegra Allegra
  • High 7.2
    CVE-2025-3486

    Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability

    Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific…

    Allegra Allegra
  • High 7.2
    CVE-2024-5581

    Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability

    Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw e…

    Allegra Allegra
  • High 7.2
    CVE-2024-5580

    Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. …

    Allegra Allegra
  • High 7.2
    CVE-2024-5579

    Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability…

    Allegra Allegra
  • High 8.8
    CVE-2024-30372

    Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability

    Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The sp…

    Allegra Allegra
  • High 7.5
    CVE-2023-52334

    Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability

    Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this v…

    Allegra Allegra
  • High 7.5
    CVE-2023-52332

    Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability

    Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is not required to exploit this vulnerabi…

    Allegra Allegra
  • Critical 9.8
    CVE-2023-52333

    Allegra saveFile Directory Traversal Remote Code Execution Vulnerability

    Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product imp…

    Allegra Allegra
  • High 7.5
    CVE-2023-51648

    Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

    Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vul…

    Allegra Allegra
  • High 7.2
    CVE-2023-51647

    Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability

    Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the e…

    Allegra Allegra
  • High 7.2
    CVE-2023-51646

    Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability

    Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the…

    Allegra Allegra
  • High 7.2
    CVE-2023-51645

    Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability

    Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existi…

    Allegra Allegra
  • Critical 9.8
    CVE-2023-51644

    Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability

    Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The …

    Allegra Allegra
  • High 7.2
    CVE-2023-51643

    Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability

    Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the exist…

    Allegra Allegra
  • Critical 9.8
    CVE-2023-51642

    Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulner…

    Allegra Allegra
  • Critical 9.8
    CVE-2023-51641

    Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability

    Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vul…

    Allegra Allegra
  • High 7.2
    CVE-2023-51640

    Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability

    Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, th…

    Allegra Allegra
  • Critical 9.8
    CVE-2023-51639

    Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability

    Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The …

    Allegra Allegra
  • Critical 9.8
    CVE-2023-51638

    Allegra Hard-coded Credentials Authentication Bypass Vulnerability

    Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exist…

    Allegra Allegra