Skip to content
OpenAdvisories

Vendor

dotCMS

9 known vulnerabilities.

dotCMS at a glance

Last 12 months
3
Critical · all time
5
Exploited · all time
0
Public exploit · all time
2
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability, 1 critical March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability, 1 critical June 2026: 0 vulnerabilities Jun July 2026: 1 vulnerability, 1 critical August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202611
Jun 202600
May 202611
Apr 202600
Mar 202600
Feb 202611
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202511
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

dotCMS Core 6 dotCMS 2 dotCMS Cloud Services (dCS) 1
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Critical 9.4
    CVE-2026-16337

    Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22…

    dotCMS dotCMS
  • Critical 10.0
    CVE-2026-8054 Public exploit

    Unauthenticated SQL Injection in dotCMS Publish Audit API

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API endpoints (/api/auditPublishing/get and /api/auditPublishing/getAll) in dotCMS Core 25.11.04-1 through 26.04.28-02 allows remote unauthenticated atta…

    dotCMS dotCMS Core
  • Critical 9.4
    CVE-2025-11165

    A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users wi…

    dotCMS dotCMS
  • Critical 9.4
    CVE-2025-8311 Public exploit

    dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endp…

    dotCMS dotCMS Cloud Services (dCS)
  • Critical 9.9
    CVE-2024-4447

    In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remotin…

    dotCMS dotCMS Core
  • Medium 5.4
    CVE-2024-3938

    The "reset password" login page accepted an HTML injection via URL parameters. This has already been rectified via patc…

    dotCMS dotCMS Core
  • Medium 4.5
    CVE-2024-3165

    Database Credential Exposure in the Logs

    System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment.   OWAS…

    dotCMS dotCMS Core
  • Medium 4.5
    CVE-2024-3164

    In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an A…

    dotCMS dotCMS Core
  • Medium 5.3
    CVE-2023-3042

    CNA SHORTNAME: dotCMSORG UUID: 5b9d93f2-25c7-46b4-ab60-d201718c9dd8

    In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from URLs, potentially enabling bypasses for XSS and access controls. An example affected URL is https://demo.dotcms.com//html/portlet/ext/files/edit_text_inc.…

    dotCMS dotCMS Core