Skip to content
OpenAdvisories

Vendor

Openkm

7 known vulnerabilities.

Products

OpenKM Community Edition 3 OpenKM Professional Edition 3 OpenKM 2 Document Management Community 1 OpenKM Document Management Community 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-41917

    OpenKM 6.3.12 Local File Inclusion via Admin Scripting

    OpenKM 6.3.12 contains a local file inclusion vulnerability in the administrative scripting interface at /admin/Scripting that allows authenticated administrators to read arbitrary files by supplying an attacker-controlled filesystem path through the fsPath p…

    Openkm OpenKM Professional Edition OpenKM Community Edition
  • Medium 5.4
    CVE-2022-47414

    If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in …

    Openkm OpenKM
  • Medium 5.4
    CVE-2022-47413

    Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II")…

    Openkm OpenKM
  • Medium 4.6
    CVE-2021-3628

    OpenKM Document Management Community vulnerable to Cross Site Scripting

    OpenKM Community Edition in its 6.3.10 version is vulnerable to authenticated Cross-site scripting (XSS). A remote attacker could exploit this vulnerability by injecting arbitrary code via de uuid parameter.

    Openkm Document Management Community