Optimizely · product

Optimizely Cms

4 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the application does not properly validate upload…CVE-2025-22389Optimizely · CVSS 8 · 0.5% likely
CWE-434
Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Admin panel.CVE-2023-31754Optimizely · 0.4% likely
CWE-79
An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0. A high-severity Stored Cross-Site Scripting (XSS) vulnerability exists in the CMS, allowing malicious acto…CVE-2025-22388Optimizely · CVSS 5.7 · 0.4% likely
CWE-79
An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS due to insufficient enforcement of password complexity r…CVE-2025-22390Optimizely · CVSS 7.5 · 0.4% likely
CWE-521

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.