CVE security advisories and vulnerability history for october by octobercms.
Last updated
octobercms october has 61 published CVE records since 2015, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 15 have a known public exploit. The average CVSS base score across scored CVEs is 5.5.
This page aggregates every publicly disclosed vulnerability (CVE) affecting octobercms october, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of octobercms october's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
17 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of octobercms october's CVEs is confirmed exploited in the wild.
Public exploits
15
15 of octobercms october's CVEs have a known public exploit available.
Browse every octobercms october version named in a CVE, then pick one to see only the CVEs that affect it.
61 CVEs
Showing 30 of 61
The CWE weakness categories most often found in octobercms october CVEs. Follow any weakness for its full explanation.
How many octobercms october CVEs were published each year.
Browse vulnerabilities for other products by octobercms.
Common questions about octobercms october vulnerabilities.
octobercms october has 61 published CVE records since 2015.
Yes — 1 of octobercms october's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 15 of octobercms october's CVEs have a known public exploit.
321 distinct octobercms october versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
octobercms october's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-862 (Missing Authorization), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).
octobercms october has 2 critical and 8 high-severity CVEs.
The average CVSS base score across octobercms october's scored CVEs is 5.5.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new octobercms october vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
