Skip to content
OpenAdvisories

Vendor

Openkm

7 known vulnerabilities.

Products

OpenKM Community Edition 3 OpenKM Professional Edition 3 OpenKM 2 Document Management Community 1 OpenKM Document Management Community 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-42785

    OpenKM 6.3.12 Remote Code Execution via Administrative Scripting

    OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary Java/BeanShell code through the /admin/Scripting endpoint. Attackers can submit malicious script content with an action=Evaluate paramet…

    Openkm OpenKM Community Edition OpenKM Professional Edition
  • High 7.2
    CVE-2026-42425

    OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery

    OpenKM 6.3.12 contains an unrestricted SQL execution vulnerability that allows authenticated administrative users to execute arbitrary SQL statements against the application database via the DatabaseQuery interface. Attackers can submit malicious SQL queries …

    Openkm OpenKM Professional Edition OpenKM Community Edition
  • High 8.5
    CVE-2022-2131

    OpenKM XXE Injection

    OpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file without the required security flags, allowing an attacker to perform a XML external entity injection attack.

    Openkm OpenKM Document Management Community