Vulnerabilities

TI-2025-16290 CVE-2025-22390 · GHSA-f4vp-28x5-837r

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0.

LOW 39

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00359 Published 2025-01-04 No fix listed CWE-521

TI-2025-16289 CVE-2025-22389 · GHSA-fc9r-7hhq-7wqj

LOW 37

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00503 Published 2025-01-04 No fix listed CWE-434

TI-2025-16288 CVE-2025-22388 · GHSA-52qc-q82v-p8hj

LOW 26

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00373 Published 2025-01-04 No fix listed CWE-79

TI-2023-15203 CVE-2023-31754 · GHSA-gjm2-mfg9-qjv2

MEDIUM 55

Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Admin panel.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00423 Published 2023-11-14 No fix listed CWE-79