Accela

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Accela records in CISA KEV

No Accela vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Civic Platform 4 records MEDIUM Automation Platform 1 record MEDIUM Civic Platform Citizen Access Portal 1 record MEDIUM

Records

6 records

TI-2025-35598 CVE-2025-57644 · GHSA-h849-wc5h-67mg

Accela Automation Platform 22.2.3.0.230103 contains multiple vulnerabilities in the Test…

MEDIUM 43

Accela Automation Platform 22.2.3.0.230103 contains multiple vulnerabilities in the Test Script feature.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00743 Published 2025-09-19 No fix listed CWE-20

TI-2016-04917 CVE-2016-5661 · GHSA-q2hc-xfq6-qp7r

Accela Civic Platform Citizen Access portal relies on the client to restrict file types…

MEDIUM 43

Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02557 Published 2016-07-15 No fix listed CWE-284

TI-2021-13405 CVE-2021-34370 · GHSA-m5fq-23j5-h7j7

Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS.

MEDIUM 40

Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.09996 Published 2021-06-09 No fix listed CWE-79

TI-2021-13404 CVE-2021-34369 · GHSA-vf96-5gw2-gvj4

portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows…

MEDIUM 40

portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a modified contactSeqNumber value.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.08236 Published 2021-06-09 No fix listed

TI-2021-13216 CVE-2021-33904 · GHSA-w8x8-8rp7-r92g

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode…

MEDIUM 40

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.09972 Published 2021-06-07 No fix listed CWE-79

TI-2016-04916 CVE-2016-5660 · GHSA-7xrp-7vm5-7qjw

Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform…

LOW 31

Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01664 Published 2016-07-15 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	4
Low	0
No CVSS	0