Vulnerability index

Browse CVEs

9 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2025-70363 Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access sensitive… Ez Platform after 2.5.32 Fix from $1,9502026-03-06 MEDIUM 5.4 CVE-2020-23065 Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attacker to ex… Ezpublish Legacy Mitigation only Fix from $1,6002023-06-26 CRITICAL 9.8 CVE-2022-48367 An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled. Digital Experience Platform 1.1.9 / 1.3.17+ Fix from $2,3002023-03-12 HIGH 7.2 CVE-2022-48365 An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges. Digital Experience Platform 1.3.26 / 2.5.31+ Fix from $1,9502023-03-12 MEDIUM 6.1 CVE-2021-46875 An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js… Ez Platform Kernel 1.2.5.1 / 1.3.1.1+ Fix from $1,6002023-03-12 MEDIUM 5.3 CVE-2021-46876 An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence. Ez Platform Kernel 6.13.8.1 / 7.5.15.1+ Fix from $1,6002023-03-12 MEDIUM 5.3 CVE-2022-41876 ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source. Versions prior to 2.3.12 and 1.0.13 are subject to Insecur… Ezplatform Graphql 1.0.13 / 2.3.12+ Fix from $1,6002022-11-10 CRITICAL 9.8 CVE-2022-25337 Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames. Ez Platform Kernel 1.3.12 / 7.5.26+ Fix from $2,3002022-02-18 MEDIUM 5.3 CVE-2022-25336 Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks against image… Ez Platform Kernel 1.3.12 / 7.5.26+ Fix from $1,6002022-02-18