Known Vulnerabilities for products from Ofcms Project
Listed below are 15 of the newest known vulnerabilities associated with the vendor "Ofcms Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-10204 json | Not Provided | 2026-06-01 | 2026-06-01 | |
| CVE-2026-10203 json | Not Provided | 2026-06-01 | 2026-06-01 | |
| CVE-2026-10202 json | Not Provided | 2026-06-01 | 2026-06-03 | |
| CVE-2026-10193 json | Not Provided | 2026-05-31 | 2026-06-02 | |
| CVE-2023-51807 json | 5.4 - MEDIUM | 2024-01-16 | 2024-01-23 | |
| CVE-2023-24760 json | An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController... | 8.8 - HIGH | 2023-03-16 | 2023-03-21 |
| CVE-2022-29653 json | OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/updat... | 6.1 - MEDIUM | 2022-06-02 | 2022-06-09 |
| CVE-2022-27961 json | A cross-site scripting (XSS) vulnerability at /ofcms/company-c-47 in OFCMS v1.1.4 allows attackers to execute arbitrary web s... | 5.4 - MEDIUM | 2022-04-10 | 2022-04-14 |
| CVE-2022-27960 json | Insecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access... | 5.4 - MEDIUM | 2022-04-10 | 2022-04-15 |
| CVE-2019-9617 json | An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx... | 8.8 - HIGH | 2019-03-06 | 2019-03-07 |
| CVE-2019-9616 json | An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx... | 7.2 - HIGH | 2019-03-06 | 2020-08-24 |
| CVE-2019-9615 json | An issue was discovered in OFCMS before 1.1.3. It allows admin/system/generate/create?sql= SQL injection, related to SystemGe... | 7.2 - HIGH | 2019-03-06 | 2019-03-07 |
| CVE-2019-9614 json | An issue was discovered in OFCMS before 1.1.3. A command execution vulnerability exists via a template file with '<#assign ex... | 8.8 - HIGH | 2019-03-06 | 2021-07-21 |
| CVE-2019-9613 json | An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx... | 7.2 - HIGH | 2019-03-06 | 2019-03-07 |
| CVE-2019-9612 json | An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx... | 8.8 - HIGH | 2019-03-06 | 2019-03-07 |
| CVE-2019-9611 json | An issue was discovered in OFCMS before 1.1.3. It allows admin/cms/template/getTemplates.html?res_path=res directory traversa... | 6.5 - MEDIUM | 2019-03-06 | 2019-03-07 |
| CVE-2019-9610 json | An issue was discovered in OFCMS before 1.1.3. It has admin/cms/template/getTemplates.html?res_path=res&up_dir=../ directory ... | 4.3 - MEDIUM | 2019-03-06 | 2019-03-07 |
| CVE-2019-9609 json | An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx... | 8.8 - HIGH | 2019-03-06 | 2019-03-07 |
| CVE-2019-9608 json | An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx... | 8.8 - HIGH | 2019-03-06 | 2019-03-07 |
Known software with vulnerabilities from Ofcms Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Ofcms Project | Ofcms | 1.1.3 |