How many dotcms dotCMS Cloud Services (dCS) CVEs are in CISA KEV?

None of dotcms dotCMS Cloud Services (dCS)'s CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for dotcms dotCMS Cloud Services (dCS) vulnerabilities?

Yes — 1 of dotcms dotCMS Cloud Services (dCS)'s CVEs have a known public exploit.

Which versions of dotcms dotCMS Cloud Services (dCS) are affected?

1 distinct dotcms dotCMS Cloud Services (dCS) version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in dotcms dotCMS Cloud Services (dCS) CVEs?

dotcms dotCMS Cloud Services (dCS)'s CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

How many critical dotcms dotCMS Cloud Services (dCS) vulnerabilities are there?

dotcms dotCMS Cloud Services (dCS) has 1 critical and 0 high-severity CVEs.

What is the average severity of dotcms dotCMS Cloud Services (dCS) CVEs?

The average CVSS base score across dotcms dotCMS Cloud Services (dCS)'s scored CVEs is 9.4.

RadicalNotion.AI

Log in Start free

dotcms

1 CVEs

dotCMS Cloud Services (dCS) Vulnerabilities

Name: dotCMS Cloud Services (dCS) vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for dotCMS Cloud Services (dCS) by dotcms.

1

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

9.4

Avg CVSS

2025–2025

Last updated September 4, 2025

Overview

dotCMS Cloud Services (dCS) has 1 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 9.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting dotCMS Cloud Services (dCS), with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of dotCMS Cloud Services (dCS)'s CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of dotCMS Cloud Services (dCS)'s CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of dotCMS Cloud Services (dCS)'s CVEs has a known public exploit available.

Affected versions and CVEs

Browse every dotCMS Cloud Services (dCS) version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 24.03.22+1 CVE

Find a version

1 CVE

Sort

Critical vulnerability · 2025-09-04
CVE-2025-8311
Public exploit
CWE-89
Critical · CVSS 9.4
EPSS 1.7% (75th pct)2025-09-04

Common weakness types

The CWE weakness categories most often found in dotCMS Cloud Services (dCS) CVEs. Follow any weakness for its full explanation.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1 CVE

Other dotcms products

Browse vulnerabilities for other products by dotcms.

dotcms58 CVEs core55 CVEs dotCMS core6 CVEs com.dotcms:dotcms1 CVEs

All dotcms vulnerabilities

Frequently asked questions

Common questions about dotCMS Cloud Services (dCS) vulnerabilities.

How many CVEs does dotcms dotCMS Cloud Services (dCS) have?: dotcms dotCMS Cloud Services (dCS) has 1 published CVE records since 2025.
How many dotcms dotCMS Cloud Services (dCS) CVEs are in CISA KEV?: None of dotcms dotCMS Cloud Services (dCS)'s CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for dotcms dotCMS Cloud Services (dCS) vulnerabilities?: Yes — 1 of dotcms dotCMS Cloud Services (dCS)'s CVEs have a known public exploit.
Which versions of dotcms dotCMS Cloud Services (dCS) are affected?: 1 distinct dotcms dotCMS Cloud Services (dCS) version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in dotcms dotCMS Cloud Services (dCS) CVEs?: dotcms dotCMS Cloud Services (dCS)'s CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
How many critical dotcms dotCMS Cloud Services (dCS) vulnerabilities are there?: dotcms dotCMS Cloud Services (dCS) has 1 critical and 0 high-severity CVEs.
What is the average severity of dotcms dotCMS Cloud Services (dCS) CVEs?: The average CVSS base score across dotcms dotCMS Cloud Services (dCS)'s scored CVEs is 9.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track dotCMS Cloud Services (dCS) vulnerabilities

Monitor new dotCMS Cloud Services (dCS) vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing