Orckestra

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Orckestra records in CISA KEV

No Orckestra vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in C1 Cms · all components

TI-2021-13979 CVE-2021-34992 · GHSA-xr89-j843-vpgq

MEDIUM 45

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04274 Published 2021-11-15 No fix listed CWE-502

TI-2022-18632 CVE-2022-39256 · GHSA-gfhp-jgp6-838j

MEDIUM 44

Orckestra C1 CMS is a .NET based Web Content Management System.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01663 Published 2022-09-27 Fixed in 6.13 CWE-502

TI-2019-13230 CVE-2019-18211 · GHSA-76qf-3cvm-8qwq

MEDIUM 43

An issue was discovered in Orckestra C1 CMS through 6.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0256 Published 2019-12-23 No fix listed CWE-502

TI-2022-08602 CVE-2022-24789 · GHSA-8pp6-8x4q-c5mx

LOW 35

C1 CMS is an open-source, .NET based Content Management System (CMS).

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00764 Published 2022-03-28 Fixed in 6.12, 6.12.8122.18346 CWE-918