https://vulnogram.org/ Most recent CVEs assigned by dotCMS LLC (dotcms). https://vulnogram.org/seaview/icons/dotcms.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-16337 https://vulnogram.org/CVE-2026-16337 Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22-03 on all platforms allows a low-privileged authenticated backend user to self-assign the administrative layout and self-grant the… Critical Mon, 20 Jul 2026 19:15:11 GMT https://vulnogram.org/CVE-2026-8054 https://vulnogram.org/CVE-2026-8054 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API endpoints (/api/auditPublishing/get and /api/auditPublishing/getAll) in dotCMS Core 25.11.04-1 through 26.04.28-02 allows remote unauthentic… Critical Network Exploitable Wed, 27 May 2026 07:55:25 GMT https://vulnogram.org/CVE-2025-11165 https://vulnogram.org/CVE-2025-11165 A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privileges to bypass class and package restrictions enforced by SecureUberspectorImpl. By dynamically modifying the Ve… Critical Tue, 24 Feb 2026 08:27:07 GMT https://vulnogram.org/CVE-2025-8311 https://vulnogram.org/CVE-2025-8311 dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separated list of site identifiers or keys. The vulnerabi… Critical Known Exploited Thu, 04 Sep 2025 14:12:42 GMT https://vulnogram.org/CVE-2024-4447 https://vulnogram.org/CVE-2024-4447 In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remoting API (UserSessionAjax.getSessionList.dwr) calls. While this is information that would and should be available to admins who posses… Critical Fri, 26 Jul 2024 02:02:32 GMT https://vulnogram.org/CVE-2024-3938 https://vulnogram.org/CVE-2024-3938 The "reset password" login page accepted an HTML injection via URL parameters. This has already been rectified via patch, and as such it cannot be demonstrated via Demo site link. Those interested to see the vulnerability may spin up a http://localho… Medium Network Exploitable Thu, 25 Jul 2024 21:17:49 GMT https://vulnogram.org/CVE-2024-3165 https://vulnogram.org/CVE-2024-3165 System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environmen… Medium Mon, 01 Apr 2024 21:38:04 GMT https://vulnogram.org/CVE-2024-3164 https://vulnogram.org/CVE-2024-3164 In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and not just to CMS Admins. Users that get site admin but not a system admi… Medium Mon, 01 Apr 2024 21:27:51 GMT https://vulnogram.org/CVE-2023-3042 https://vulnogram.org/CVE-2023-3042 In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from URLs, potentially enabling bypasses for XSS and access controls. An example affected URL is https://demo.dotcms.com//html/portlet/ext/files/edit_… Medium Network Exploitable Tue, 17 Oct 2023 22:52:05 GMT