Optimizely

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Optimizely records in CISA KEV

No Optimizely vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Optimizely Cms · all components

TI-2023-15203 CVE-2023-31754 · GHSA-gjm2-mfg9-qjv2

MEDIUM 55

Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Admin panel.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00423 Published 2023-11-14 No fix listed CWE-79

TI-2025-16290 CVE-2025-22390 · GHSA-f4vp-28x5-837r

LOW 39

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00359 Published 2025-01-04 No fix listed CWE-521

TI-2025-16289 CVE-2025-22389 · GHSA-fc9r-7hhq-7wqj

LOW 37

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00503 Published 2025-01-04 No fix listed CWE-434

TI-2025-16288 CVE-2025-22388 · GHSA-52qc-q82v-p8hj

LOW 26

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00373 Published 2025-01-04 No fix listed CWE-79