Access Control

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.CVE-2012-1826Dotcms · 2.2% likely

   CWE-264

2. In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later.CVE-2016-8600Dotcms · 1.8% likely

   CWE-264

3. Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22-03 on all platforms allows a low-privileged authenticated b…CVE-2026-16337dotCMS · CVSS 9.4 · 0.6% likely

   CWE-269

4. In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remoting API (UserSessionAjax.getSessionList.dwr) calls. While this…CVE-2024-4447dotCMS · CVSS 9.9 · 0.5% likely

   CWE-863

5. In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and…CVE-2024-3164dotCMS · CVSS 4.5 · 0.5% likely

   CWE-284

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.