How many umbraco Umbraco.Cms.Web.BackOffice CVEs are in CISA KEV?

None of umbraco Umbraco.Cms.Web.BackOffice's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of umbraco Umbraco.Cms.Web.BackOffice are affected?

20 distinct umbraco Umbraco.Cms.Web.BackOffice versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in umbraco Umbraco.Cms.Web.BackOffice CVEs?

umbraco Umbraco.Cms.Web.BackOffice's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-285 (Improper Authorization), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-918 (Server-Side Request Forgery (SSRF)).

How many critical umbraco Umbraco.Cms.Web.BackOffice vulnerabilities are there?

umbraco Umbraco.Cms.Web.BackOffice has 1 critical and 0 high-severity CVEs.

What is the average severity of umbraco Umbraco.Cms.Web.BackOffice CVEs?

The average CVSS base score across umbraco Umbraco.Cms.Web.BackOffice's scored CVEs is 6.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

umbraco

4 CVEs

nuget

umbraco Umbraco.Cms.Web.BackOffice Vulnerabilities

Name: umbraco Umbraco.Cms.Web.BackOffice vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Umbraco.Cms.Web.BackOffice by umbraco.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.9

Avg CVSS

2023–2025

Last updated March 11, 2025

Overview

umbraco Umbraco.Cms.Web.BackOffice has 4 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting umbraco Umbraco.Cms.Web.BackOffice, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of umbraco Umbraco.Cms.Web.BackOffice's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of umbraco Umbraco.Cms.Web.BackOffice's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No umbraco Umbraco.Cms.Web.BackOffice CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every umbraco Umbraco.Cms.Web.BackOffice version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 10.8.91 CVE
10.5.0 <= v < 10.8.61 CVE
11.0.0 <= v < 11.4.21 CVE
11.0.0-rc1 <= v < 13.7.11 CVE
12.0.0 <= v < 12.0.11 CVE
12.0.0 <= v < 12.3.101 CVE
13.0.0 <= v < 13.1.11 CVE
13.0.0 <= v < 13.3.11 CVE
8.18.5 <= v < 8.18.141 CVE
9.0.0 <= v < 10.6.11 CVE

Fixed in

10.6.11 CVE
10.8.61 CVE
10.8.91 CVE
11.4.21 CVE
12.0.11 CVE
12.3.101 CVE
13.1.11 CVE
13.3.11 CVE
13.7.11 CVE
8.18.141 CVE

Find a version

4 CVEs

Sort

Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content
CVE-2025-27602
Patch
CWE-285
Medium · CVSS 6.4
EPSS 0.3% (20th pct)2025-03-11
Medium vulnerability · 2024-05-21
CVE-2024-34071
Patch
CWE-601
Medium · CVSS 6.1
EPSS 0.4% (30th pct)2024-05-21
Medium vulnerability · 2024-04-17
CVE-2024-29035
Patch
CWE-918
Medium · CVSS 5.3
EPSS 0.4% (35th pct)2024-04-17
Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
CVE-2023-37267
Patch
CWE-284
Critical · CVSS 9.8
EPSS 0.7% (50th pct)2023-07-13

Common weakness types

The CWE weakness categories most often found in umbraco Umbraco.Cms.Web.BackOffice CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many umbraco Umbraco.Cms.Web.BackOffice CVEs were published each year.

2023

1

2024

2

2025

1

Other umbraco products

Browse vulnerabilities for other products by umbraco.

umbraco cms57 CVEs umbraco-cms56 CVEs Umbraco.CMS26 CVEs umbraco forms7 CVEs umbraco6 CVEs UmbracoCms.Core5 CVEs UmbracoCms4 CVEs Umbraco.Forms.Issues4 CVEs

All umbraco vulnerabilities

Frequently asked questions

Common questions about umbraco Umbraco.Cms.Web.BackOffice vulnerabilities.

How many CVEs does umbraco Umbraco.Cms.Web.BackOffice have?: umbraco Umbraco.Cms.Web.BackOffice has 4 published CVE records since 2023.
How many umbraco Umbraco.Cms.Web.BackOffice CVEs are in CISA KEV?: None of umbraco Umbraco.Cms.Web.BackOffice's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for umbraco Umbraco.Cms.Web.BackOffice vulnerabilities?: No umbraco Umbraco.Cms.Web.BackOffice CVEs currently have a tracked public exploit in this dataset.
Which versions of umbraco Umbraco.Cms.Web.BackOffice are affected?: 20 distinct umbraco Umbraco.Cms.Web.BackOffice versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in umbraco Umbraco.Cms.Web.BackOffice CVEs?: umbraco Umbraco.Cms.Web.BackOffice's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-285 (Improper Authorization), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-918 (Server-Side Request Forgery (SSRF)).
How many critical umbraco Umbraco.Cms.Web.BackOffice vulnerabilities are there?: umbraco Umbraco.Cms.Web.BackOffice has 1 critical and 0 high-severity CVEs.
What is the average severity of umbraco Umbraco.Cms.Web.BackOffice CVEs?: The average CVSS base score across umbraco Umbraco.Cms.Web.BackOffice's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track umbraco Umbraco.Cms.Web.BackOffice vulnerabilities

Monitor new umbraco Umbraco.Cms.Web.BackOffice vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing