Sploitus

19 exploited vulnerabilities in Opencms

Vulnerabilities with publicly known exploits

Vendors
Opencms, Alkacon
With known exploits
19
Affected Alkacon Opencms versions
= 10.5.3, 10.5.4, 10.5.5, 7.0.3, 7.0.4, 8.5.1, 6.0.0, 6.0.2, 6.0.3, 6.0.4, 6.2, 6.2.1, 6.2.2, 6.2.3, 8.5
Affected Alkacon Opencms Apollo Template versions
= 10.5.4, 10.5.5

Vulnerabilities with exploits

Highest CVSS first — 6 of these already have exploit code on Sploitus

CVE-2023-42344
CVSS 10.0 HIGH 2023-08-07FIX AVAILABLE
CVE-2026-38429
CVSS 9.8 CRITICAL 2026-05-05FIX AVAILABLE
CVE-2018-8811 4 exploits
CVSS 8.8 HIGH 2018-03-20FIX AVAILABLE
OpenCMS 10.5.3 Cross Site Request ForgeryOpenCMS 10.5.3 - Cross-Site Request Forgery Vulnerability
CVE-2019-11819
CVSS 7.8 HIGH 2019-05-08FIX AVAILABLE
CVE-2024-5521
CVSS 6.4 MEDIUM 2024-05-30FIX AVAILABLE
CVE-2024-5520
CVSS 6.4 MEDIUM 2024-05-30FIX AVAILABLE
CVE-2023-6380
CVSS 6.1 MEDIUM 2023-12-13
CVE-2019-13236 4 exploits
CVSS 6.1 MEDIUM 2019-08-27FIX AVAILABLE
Alkacon OpenCMS 10.5.x - Cross-Site Scripting Vulnerability (2)Alkacon OpenCMS 10.5.x - Cross-Site Scripting (2)
CVE-2019-11818
CVSS 6.1 MEDIUM 2019-05-08FIX AVAILABLE
CVE-2023-6379
CVSS 5.4 MEDIUM 2023-12-13
CVE-2008-1301 1 exploit
CVSS 4.6 MEDIUM 2008-03-12FIX AVAILABLE
Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath.0' Arbitrary File Access
CVE-2006-3934
CVSS 4.6 MEDIUM 2006-07-31FIX AVAILABLE
CVE-2025-28099
CVSS 4.3 MEDIUM 2025-04-21
CVE-2019-13237 4 exploits
CVSS 4.3 MEDIUM 2019-08-27
Alkacon OpenCMS 10.5.x - Local File inclusion VulnerabilityAlkacon OpenCMS 10.5.x - Local File inclusion
CVE-2013-4600 2 exploits
CVSS 4.3 MEDIUM 2013-08-09FIX AVAILABLE
OpenCMS 8.5.1 Cross Site Scripting VulnerabilityOpenCMS 8.5.1 Cross Site Scripting
CVE-2008-1300 1 exploit
CVSS 4.3 MEDIUM 2008-03-12FIX AVAILABLE
Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath' Cross-Site Scripting
CVE-2006-3936
CVSS 4.0 MEDIUM 2006-07-31FIX AVAILABLE
CVE-2006-3933
CVSS 3.5 LOW 2006-07-31FIX AVAILABLE
CVE-2006-2571
CVSS 2.6 LOW 2006-05-24