Read the docs

Ametys

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ametys records in CISA KEV

No Ametys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ametys 4 records MEDIUM

Records

4 records

TI-2022-26389 CVE-2022-50937 · GHSA-vp44-cvv7-7x54

Ametys CMS v4.4.1 - Cross Site Scripting (XSS)

Priority MEDIUM 56

Ametys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for external links.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0032 Published 2026-01-13 No fix listed CWE-79
TI-2017-12471 CVE-2017-16935 · GHSA-4x38-6389-m4h2

Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring…

Priority MEDIUM 52

Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended access restrictions via a direct request to /plugins/core-ui/servercomm/messages.xm…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07663 Published 2017-11-24 No fix listed CWE-20
Open these records in search →