CVE security advisories and vulnerability history for dotCMS.
dotCMS has 61 published CVE records since 2008, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting dotCMS products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
A quick read on dotCMS's vulnerability posture, as a share of its 61 published CVEs.
across 61 scored CVEs
30 of 61 scored
1 of 61 CVEs
8 of 61 CVEs
30 of 61 CVEs
How the CVSS severity of dotCMS's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of dotCMS's CVEs is confirmed exploited in the wild.
Public exploits
8
8 of dotCMS's CVEs have a known public exploit available.
The dotCMS products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in dotCMS CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish dotCMS CVE records.
How many dotCMS CVEs were published each year.
The most recently disclosed vulnerabilities affecting dotCMS.
Track new dotCMS CVEs as they are disclosed and get AI-written analysis and remediation guidance.
Monitor dotCMS CVEsBrowse vulnerabilities for other tracked vendors.
Common questions about dotCMS vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new dotCMS vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
