Acquia

Records42All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

Acquia records in CISA KEV

No Acquia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mautic 35 records HIGH Commons 3 records LOW Dam 2 records LOW Acquia Content Hub 1 record LOW Commons Group 1 record LOW Mollom 1 record LOW

Records

2 records in Dam · all components

TI-2025-09135 CVE-2025-9954 · GHSA-x957-32v9-m7vg

Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

LOW 33

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00307 Published 2025-10-29 Fixed in 1.1.5 CWE-862

TI-2024-12305 CVE-2024-13261 · GHSA-r66p-qgmm-6967

Acquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-025

LOW 16

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3.

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.0015 Published 2025-01-09 Fixed in 1.0.13, 1.1.0-beta3 CWE-352

Open these records in search →

Critical	7
High	17
Medium	16
Low	2
No CVSS	0