Read the docs

Melis Technology

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Melis Technology records in CISA KEV

No Melis Technology vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Meliscms 2 records MEDIUM Melis-asset-manager 1 record MEDIUM

Records

6 records

TI-2025-09492 CVE-2025-10352 · GHSA-p3vc-g9f9-mgw4

Missing Authorization vulnerability in Melis Platform

Priority HIGH 81

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUs…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00327 Published 2025-10-08 Fixed in 5.3.11 CWE-862
TI-2025-09491 CVE-2025-10351 · GHSA-mrmx-jfw8-qhgv

SQL injection vulnerability in Melis Platform

Priority HIGH 81

SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00413 Published 2025-10-08 Fixed in 5.3.4 CWE-89
TI-2025-09493 CVE-2025-10353 · GHSA-chw4-gjvw-3gxc

Missing Authorization vulnerability in Melis Platform

Priority HIGH 79

File upload leading to remote code execution (RCE) in the “melis-cms-slider” module of Melis Technology's Melis Platform.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0266 Published 2025-10-08 Fixed in 5.3.1 CWE-43
TI-2022-18672 CVE-2022-39296 · GHSA-7fj2-rrq6-rphq

Path traversal in MelisAssetManager

Priority MEDIUM 47

MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0195 Published 2022-10-11 Fixed in 5.0.1 CWE-22
TI-2022-18674 CVE-2022-39298 · GHSA-h479-2mv4-5c26

Deserialization of untrusted data in MelisFront

Priority MEDIUM 45

MelisFront is the engine that displays website hosted on Melis Platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01267 Published 2022-10-12 Fixed in 5.0.1 CWE-502
TI-2022-18673 CVE-2022-39297 · GHSA-m3m3-6gww-7gj9

Deserialization of untrusted data in MelisCms

Priority MEDIUM 45

MelisCms provides a full CMS for Melis Platform, including templating system, drag'n'drop of plugins, SEO and many administration tools.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01267 Published 2022-10-12 Fixed in 5.0.1 CWE-502
Open these records in search →