Dotcms · product

dotCMS

51 CVEs · 1 exploited

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Connect AI

exploited in the wild: 1
check available: 1
likely to be exploited: 1

Every one of the 51 is a mark on the map. Named now: 1 to 26, most at risk first.

DotCMS - Arbitrary File UploadCVE-2022-26352dotCMS · CVSS 9.8 · 91% likely
DotCMS < 5.0.2 - Open RedirectCVE-2018-17422Dotcms · 3.7% likely
CWE-601
dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute files under $TOMCAT_HOME/webapps/ROOT/asset…CVE-2020-6754Dotcms · 95% likely
CWE-22
An issue was discovered in dotCMS core 4.x through 22.10.2. An authenticated directory traversal vulnerability in the dotCMS API can lead to Remote Code Execution.CVE-2022-45783Dotcms · CVSS 6.5 · 8.5% likely
CWE-22
Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to arb…CVE-2017-11466Dotcms · 7.7% likely
CWE-434
An issue was discovered in dotCMS through 3.6.1. The findChildrenByFilter() function which is called by the web accessible path /categoriesServlet performs string interpolation an…CVE-2017-5344Dotcms · 6.3% likely
CWE-89
Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the component "/src/main/java/com/dotmarketing/fi…CVE-2020-19138Dotcms · 5.7% likely
CWE-434
Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) news/index.dot and (2)…CVE-2008-3708Dotcms · 4.6% likely
CWE-22
SQL injection vulnerability in the categoriesServlet servlet in dotCMS before 3.3.1 allows remote not authenticated attackers to execute arbitrary SQL commands via the sort parame…CVE-2016-8902Dotcms · 2.8% likely
CWE-89
CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject.CVE-2016-4803Dotcms · 2.2% likely
dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.CVE-2012-1826Dotcms · 2.2% likely
CWE-264
SQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to execute arbitrary SQL commands via the stName parameter to api/content/save/1.CVE-2016-2355Dotcms · 2.1% likely
CWE-89
SQL injection vulnerability in the "Site Browser > HTML pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderb…CVE-2016-8908Dotcms · 2.0% likely
CWE-89
SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the or…CVE-2016-8907Dotcms · 2.0% likely
CWE-89
SQL injection vulnerability in the "Site Browser > Links pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the order…CVE-2016-8906Dotcms · 2.0% likely
CWE-89
SQL injection vulnerability in the JSONTags servlet in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the sort parameter.CVE-2016-8905Dotcms · 2.0% likely
CWE-89
Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files.CVE-2020-18875Dotcms · 2.0% likely
CWE-74
SQL injection vulnerability in the "Site Browser > Containers pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the…CVE-2016-8904Dotcms · 1.9% likely
CWE-89
SQL injection vulnerability in the "Site Browser > Templates pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the o…CVE-2016-8903Dotcms · 1.9% likely
CWE-89
Multiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) _loginUserName parameter to ap…CVE-2013-3484Dotcms · 1.9% likely
CWE-79
In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later.CVE-2016-8600Dotcms · 1.8% likely
CWE-264
SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to dwr/call/plaincall/UserAjax.getUsersList…CVE-2016-3688Dotcms · 1.6% likely
CWE-200
dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using a semicolon in a URL to introduce a matrix parameter. (This…CVE-2022-35740Dotcms · CVSS 6.1 · 1.5% likely
CWE-79
Directory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the file…CVE-2016-3972Dotcms · 1.5% likely
CWE-22
SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter.CVE-2016-4040Dotcms · 1.3% likely
CWE-89
SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute arbitra…CVE-2016-10008Dotcms · 1.3% likely
CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.