Skip to content
OpenAdvisories

Product · dotCMS

dotCMS Core

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-8054 Public exploit

    Unauthenticated SQL Injection in dotCMS Publish Audit API

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API endpoints (/api/auditPublishing/get and /api/auditPublishing/getAll) in dotCMS Core 25.11.04-1 through 26.04.28-02 allows remote unauthenticated atta…

    dotCMS dotCMS Core
  • Critical 9.9
    CVE-2024-4447

    In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remotin…

    dotCMS dotCMS Core