CVE security advisories and vulnerability history for umbraco cms by umbraco.
58
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
15
Public exploits
PoC or exploit code
6.2
Avg CVSS
2014–2026
Last updated
Overview
umbraco cms has 58 published CVE records since 2014, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 15 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.
Severity and exploitation
How the CVSS severity of umbraco cms's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical4
High9
Medium45
Low0
In CISA’s Known Exploited Vulnerabilities catalog
0
None of umbraco cms's CVEs are currently listed in CISA's KEV catalog.
Public exploits
15
15 of umbraco cms's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every umbraco cms version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
8.0.0 <= v < 8.18.106 CVEs
10.0.0 <= v < 10.8.15 CVEs
12.0.0 <= v < 12.3.44 CVEs
<= 8.9.13 CVEs
10.0 <= v < 10.8.73 CVEs
13.0 <= v < 13.5.23 CVEs
17.0.0 <= v < 17.2.23 CVEs
< 9.2.02 CVEs
<= 7.7.22 CVEs
13.0.0 <= v < 13.1.12 CVEs
14.0.0 <= v < 14.1.22 CVEs
14.0.0 <= v < 14.3.2
Common weakness types
The CWE weakness categories most often found in umbraco cms CVEs. Follow any weakness for its full explanation.
Common questions about umbraco cms vulnerabilities.
How many CVEs does umbraco umbraco cms have?
umbraco umbraco cms has 58 published CVE records since 2014.
How many umbraco umbraco cms CVEs are in CISA KEV?
None of umbraco umbraco cms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for umbraco umbraco cms vulnerabilities?
Yes — 15 of umbraco umbraco cms's CVEs have a known public exploit.
Which versions of umbraco umbraco cms are affected?
131 distinct umbraco umbraco cms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in umbraco umbraco cms CVEs?
umbraco umbraco cms's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-863 (Incorrect Authorization), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical umbraco umbraco cms vulnerabilities are there?
umbraco umbraco cms has 4 critical and 9 high-severity CVEs.
What is the average severity of umbraco umbraco cms CVEs?
The average CVSS base score across umbraco umbraco cms's scored CVEs is 6.2.
