How many AAM Advanced Access Manager CVEs are in CISA KEV?

None of AAM Advanced Access Manager's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of AAM Advanced Access Manager are affected?

4 distinct AAM Advanced Access Manager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in AAM Advanced Access Manager CVEs?

AAM Advanced Access Manager's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of AAM Advanced Access Manager CVEs?

The average CVSS base score across AAM Advanced Access Manager's scored CVEs is 6.5.

RadicalNotion.AI

Log in Start free

AAM

2 CVEs

AAM Advanced Access Manager Vulnerabilities

Name: AAM Advanced Access Manager vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Advanced Access Manager by AAM.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.5

Avg CVSS

2024–2024

Last updated March 19, 2024

Overview

AAM Advanced Access Manager has 2 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting AAM Advanced Access Manager, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of AAM Advanced Access Manager's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of AAM Advanced Access Manager's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No AAM Advanced Access Manager CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every AAM Advanced Access Manager version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 6.9.202 CVEs
>= 6.9.212 CVEs

Fixed in

> 6.9.202 CVEs
6.9.212 CVEs

Find a version

2 CVEs

Sort

WordPress Advanced Access Manager plugin <= 6.9.20 - Cross Site Scripting (XSS) vulnerability
CVE-2024-29124
Patch
CWE-79
Medium · CVSS 5.9
EPSS 0.4% (30th pct)2024-03-19
WordPress Advanced Access Manager plugin <= 6.9.20 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-29127
Patch
CWE-79
High · CVSS 7.1
EPSS 0.4% (36th pct)2024-03-19

Common weakness types

The CWE weakness categories most often found in AAM Advanced Access Manager CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs

Other AAM products

Browse vulnerabilities for other products by AAM.

Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More3 CVEs

All AAM vulnerabilities

Frequently asked questions

Common questions about AAM Advanced Access Manager vulnerabilities.

How many CVEs does AAM Advanced Access Manager have?: AAM Advanced Access Manager has 2 published CVE records since 2024.
How many AAM Advanced Access Manager CVEs are in CISA KEV?: None of AAM Advanced Access Manager's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for AAM Advanced Access Manager vulnerabilities?: No AAM Advanced Access Manager CVEs currently have a tracked public exploit in this dataset.
Which versions of AAM Advanced Access Manager are affected?: 4 distinct AAM Advanced Access Manager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in AAM Advanced Access Manager CVEs?: AAM Advanced Access Manager's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of AAM Advanced Access Manager CVEs?: The average CVSS base score across AAM Advanced Access Manager's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track AAM Advanced Access Manager vulnerabilities

Monitor new AAM Advanced Access Manager vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing