How many CVEs does ibexa have?

ibexa has 15 published CVE records since 2022, including 2 in the last two years.

How many ibexa CVEs are in CISA KEV?

None of ibexa's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which ibexa products have the most CVEs?

The ibexa products with the most published CVEs are ez platform kernel, digital_experience_platform, ez platform, ibexa/admin-ui, admin-ui.

What are the most common weakness types in ibexa CVEs?

ibexa's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-203 (Observable Discrepancy), CWE-284 (Improper Access Control), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')).

Are there public exploits for ibexa vulnerabilities?

No ibexa CVEs currently have a tracked public exploit in this dataset.

How many critical ibexa vulnerabilities are there?

ibexa has 3 critical and 4 high-severity CVEs.

What is the average severity of ibexa CVEs?

The average CVSS base score across ibexa's scored CVEs is 6.6.

RadicalNotion.AI

Log in Create an account

15 CVEs

ibexa Vulnerabilities

Name: ibexa vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ibexa.

15

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.6

Avg CVSS

2022–2026

Overview

ibexa has 15 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

Security scorecard

A quick read on ibexa's vulnerability posture, as a share of its 15 published CVEs.

Average CVSS: 6.6
Critical / high: 47%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 87%

Severity and exploitation

How the CVSS severity of ibexa's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High4

Medium7

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ibexa's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No ibexa CVEs currently have a tracked public exploit.

Most affected products

The ibexa products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in ibexa CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish ibexa CVE records.

Disclosure activity by year

How many ibexa CVEs were published each year.

2022

3

2023

6

2024

4

2025

1

2026

1

Latest ibexa CVEs

The most recently disclosed vulnerabilities affecting ibexa.

High vulnerability · 2026-03-06
CWE-284
High · CVSS 7.5
EPSS 0.2%2026-03-06
Ibexa User Bundle is missing password change validation
CWE-620
Critical · CVSS 9.3
EPSS 0.1%2025-12-11
Ibexa Admin UI vulnerable to Cross-site Scripting in a field that is used in the Content name pattern
CWE-79
Medium · CVSS 5.3
EPSS 0.5%2024-11-29
Persistent Cross-site Scripting in Ibexa RichText Field Type
CWE-79
High · CVSS 7.2
EPSS 0.4%2024-08-15
Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
CWE-79
Medium · CVSS 4.8
EPSS 0.4%2024-07-31
Liferay Portal and Liferay DXP User Enumeration Vulnerability
CWE-203
Medium · CVSS 5.3
EPSS 0.5%2024-02-20
Medium vulnerability · 2023-06-26
CWE-79
Medium · CVSS 5.4
EPSS 0.5%2023-06-26
Cross-site scripting in eZ Platform Kernel
CWE-79
Medium · CVSS 6.1
EPSS 0.4%2023-03-12
Timing attack in eZ Platform Ibexa
CWE-362
Low · CVSS 3.7
EPSS 0.5%2023-03-12
Company admin role gives excessive privileges in eZ Platform Ibexa
CWE-269
High · CVSS 7.2
EPSS 0.9%2023-03-12
/user/sessions endpoint allows detecting valid accounts
CWE-203
Medium · CVSS 5.3
EPSS 0.5%2023-03-12
Access control issue in ezsystems/ezpublish-kernel
CWE-862
Critical · CVSS 9.8
EPSS 0.7%2023-03-12

Get an alert for each new ibexa CVE, with AI-written analysis and remediation steps.

Monitor ibexa CVEs

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about ibexa vulnerabilities.

How many CVEs does ibexa have?: ibexa has 15 published CVE records since 2022, including 2 in the last two years.
How many ibexa CVEs are in CISA KEV?: None of ibexa's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which ibexa products have the most CVEs?: The ibexa products with the most published CVEs are ez platform kernel, digital_experience_platform, ez platform, ibexa/admin-ui, admin-ui.
What are the most common weakness types in ibexa CVEs?: ibexa's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-203 (Observable Discrepancy), CWE-284 (Improper Access Control), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')).
Are there public exploits for ibexa vulnerabilities?: No ibexa CVEs currently have a tracked public exploit in this dataset.
How many critical ibexa vulnerabilities are there?: ibexa has 3 critical and 4 high-severity CVEs.
What is the average severity of ibexa CVEs?: The average CVSS base score across ibexa's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ibexa vulnerabilities

Get an alert for each new ibexa CVE, with AI-written analysis and remediation steps.

Create an account See pricing