ibexa

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

ibexa records in CISA KEV

No ibexa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ez Platform Kernel 7 records MEDIUM Digital Experience Platform 3 records MEDIUM Ez Platform 3 records LOW Kernel 2 records MEDIUM Commerce 1 record LOW Ezplatform-graphql 1 record MEDIUM Ezplatform-http-cache-fastly 1 record MEDIUM Ezplatform-page-builder 1 record LOW

Records

7 records in Ez Platform Kernel · all components

TI-2022-23981 CVE-2022-48367 · GHSA-h5v2-wrhp-5v35

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28.

MEDIUM 50

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00721 Published 2023-03-12 Fixed in 7.5.28 CWE-862

TI-2022-09029 CVE-2022-25337 · GHSA-xwv6-v7qx-f5jc

Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows…

MEDIUM 44

Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01059 Published 2022-02-18 Fixed in 7.5.26 CWE-74

TI-2022-23979 CVE-2022-48365 · GHSA-qq2j-9pf8-g58c

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26.

LOW 35

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00862 Published 2023-03-12 Fixed in 7.5.30, 1.3.26 CWE-269

TI-2021-21544 CVE-2021-46876 · GHSA-gmrf-99gw-vvwj

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1.

LOW 31

An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00507 Published 2023-03-12 Fixed in 6.13.8.1, 7.5.15.1 CWE-203

TI-2021-21543 CVE-2021-46875 · GHSA-mrvj-7q4f-5p42

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1.

LOW 27

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00398 Published 2023-03-12 Fixed in 6.13.8.2, 7.5.15.2 +2 CWE-79

TI-2022-09028 CVE-2022-25336 · GHSA-x8xx-x82q-42q3

Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows…

LOW 25

Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks against image files because the image path and filename can be correctly deduced.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00707 Published 2022-02-18 Fixed in 1.3.12 CWE-639

TI-2022-23980 CVE-2022-48366 · GHSA-66m4-gc8h-hpjx

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19.

LOW 18

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00458 Published 2023-03-12 Fixed in 1.3.19, 7.5.29 CWE-362

Open these records in search →

Critical	2
High	5
Medium	6
Low	1
No CVSS	0