How many CVEs does ibexa have?

ibexa has 15 published CVE records since 2022, including 2 in the last two years.

How many ibexa CVEs are in CISA KEV?

None of ibexa's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which ibexa products have the most CVEs?

The ibexa products with the most published CVEs are ez platform kernel, digital_experience_platform, ez platform, ibexa/admin-ui, admin-ui.

What are the most common weakness types in ibexa CVEs?

ibexa's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-203 (Observable Discrepancy), CWE-284 (Improper Access Control), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')).

Are there public exploits for ibexa vulnerabilities?

No ibexa CVEs currently have a tracked public exploit in this dataset.

How many critical ibexa vulnerabilities are there?

ibexa has 3 critical and 4 high-severity CVEs.

What is the average severity of ibexa CVEs?

The average CVSS base score across ibexa's scored CVEs is 6.6.

RadicalNotion.AI

Log in Start free

15 CVEs

ibexa Vulnerabilities

Name: ibexa vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ibexa.

15

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.6

Avg CVSS

2022–2026

Overview

ibexa has 15 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting ibexa products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on ibexa's vulnerability posture, as a share of its 15 published CVEs.

Average CVSS: 6.6
Critical / high: 47%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 87%

Severity and exploitation

How the CVSS severity of ibexa's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High4

Medium7

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ibexa's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No ibexa CVEs currently have a tracked public exploit.

Most affected products

The ibexa products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in ibexa CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish ibexa CVE records.

Disclosure activity by year

How many ibexa CVEs were published each year.

2022

3

2023

6

2024

4

2025

1

2026

1

Latest ibexa CVEs

The most recently disclosed vulnerabilities affecting ibexa.

High vulnerability · 2026-03-06
CWE-284
High · CVSS 7.5
EPSS 0.2%2026-03-06
Ibexa User Bundle is missing password change validation
CWE-620
Critical · CVSS 9.3
EPSS 0.1%2025-12-11
Medium vulnerability · 2024-11-29
CWE-79
Medium · CVSS 5.3
EPSS 0.5%2024-11-29
Persistent Cross-site Scripting in Ibexa RichText Field Type
CWE-79
High · CVSS 7.2
EPSS 0.4%2024-08-15
Medium vulnerability · 2024-07-31
CWE-79
Medium · CVSS 4.8
EPSS 0.4%2024-07-31
Medium vulnerability · 2024-02-20
CWE-203
Medium · CVSS 5.3
EPSS 0.5%2024-02-20
Medium vulnerability · 2023-06-26
Medium · CVSS 5.4
EPSS 0.5%2023-06-26
Medium vulnerability · 2023-03-12
CWE-79
Medium · CVSS 6.1
EPSS 0.4%2023-03-12
Low vulnerability · 2023-03-12
CWE-362
Low · CVSS 3.7
EPSS 0.5%2023-03-12
High vulnerability · 2023-03-12
CWE-269
High · CVSS 7.2
EPSS 0.9%2023-03-12
Medium vulnerability · 2023-03-12
CWE-203
Medium · CVSS 5.3
EPSS 0.5%2023-03-12
Critical vulnerability · 2023-03-12
CWE-862
Critical · CVSS 9.8
EPSS 0.7%2023-03-12

Track new ibexa CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor ibexa CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft36,677 CVEs linux22,794 CVEs Google16,507 CVEs Apple15,096 CVEs Oracle12,708 CVEs Debian10,226 CVEs IBM8,839 CVEs Red Hat8,120 CVEs

Browse all vendors

Frequently asked questions

Common questions about ibexa vulnerabilities.

How many CVEs does ibexa have?: ibexa has 15 published CVE records since 2022, including 2 in the last two years.
How many ibexa CVEs are in CISA KEV?: None of ibexa's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which ibexa products have the most CVEs?: The ibexa products with the most published CVEs are ez platform kernel, digital_experience_platform, ez platform, ibexa/admin-ui, admin-ui.
What are the most common weakness types in ibexa CVEs?: ibexa's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-203 (Observable Discrepancy), CWE-284 (Improper Access Control), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')).
Are there public exploits for ibexa vulnerabilities?: No ibexa CVEs currently have a tracked public exploit in this dataset.
How many critical ibexa vulnerabilities are there?: ibexa has 3 critical and 4 high-severity CVEs.
What is the average severity of ibexa CVEs?: The average CVSS base score across ibexa's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ibexa vulnerabilities

Monitor new ibexa vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing