Alkacon Vulnerabilities
CVE security advisories and vulnerability history for Alkacon.
Overview
Alkacon has 41 published CVE records since 2005, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 22 have a known public exploit. The average CVSS base score across scored CVEs is 4.8.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Alkacon products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
Security scorecard
A quick read on Alkacon's vulnerability posture, as a share of its 41 published CVEs.
- Average CVSS
- 4.8
- Critical / high
- 12%
- Actively exploited (KEV)
- 0%
- Public exploit available
- 54%
- Patch available
- 80%
across 41 scored CVEs
5 of 41 scored
0 of 41 CVEs
22 of 41 CVEs
33 of 41 CVEs
Severity and exploitation
How the CVSS severity of Alkacon's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of Alkacon's CVEs are currently listed in CISA's KEV catalog.
Public exploits
22
22 of Alkacon's CVEs have a known public exploit available.
Most affected products
The Alkacon products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
Common weakness types
The CWE weakness categories most often found in Alkacon CVEs. Follow any weakness for its full explanation.
CNAs that assign these CVEs
The CVE Numbering Authorities that publish Alkacon CVE records.
Disclosure activity by year
How many Alkacon CVEs were published each year.
Latest Alkacon CVEs
The most recently disclosed vulnerabilities affecting Alkacon.
- Medium · CVSS 6.1EPSS 0.1%2026-05-08
- High · CVSS 7.3EPSS 2.2%2026-05-08
- High · CVSS 7.5EPSS 0.2%2026-05-08
- Medium · CVSS 6.1EPSS 0.6%2026-05-08
- Critical · CVSS 9.8EPSS 0.3%2026-05-05
- Medium · CVSS 5.1EPSS 0.1%2026-02-19
- Medium · CVSS 5.1EPSS 0.2%2026-02-19
- Medium · CVSS 5.4EPSS 0.2%2025-04-21
- Low · CVSS 2.0EPSS 0.3%2025-04-21
- Medium · CVSS 5.4EPSS 0.2%2025-04-18
- Medium · CVSS 6.4EPSS 0.3%2024-05-30
- Medium · CVSS 6.4EPSS 0.3%2024-05-30
Track new Alkacon CVEs as they are disclosed and get AI-written analysis and remediation guidance.
Monitor Alkacon CVEsOther vendors
Browse vulnerabilities for other tracked vendors.
Frequently asked questions
Common questions about Alkacon vulnerabilities.
- How many CVEs does Alkacon have?
- Alkacon has 41 published CVE records since 2005, including 10 in the last two years.
- How many Alkacon CVEs are in CISA KEV?
- None of Alkacon's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which Alkacon products have the most CVEs?
- The Alkacon products with the most published CVEs are OpenCms, org.opencms:opencms-core, opencms-core, opencms apollo template, apollo-template.
- What are the most common weakness types in Alkacon CVEs?
- Alkacon's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
- Are there public exploits for Alkacon vulnerabilities?
- Yes — 22 of Alkacon's CVEs have a known public exploit.
- How many critical Alkacon vulnerabilities are there?
- Alkacon has 1 critical and 4 high-severity CVEs.
- What is the average severity of Alkacon CVEs?
- The average CVSS base score across Alkacon's scored CVEs is 4.8.
References
- The MITRE CVE Program (opens in a new tab)
- Learn: What is a CVE?
- CWE directory: the weakness types these CVEs map to
- CNA directory: the CNAs that assign these CVEs
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Track Alkacon vulnerabilities
Monitor new Alkacon vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.