Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: OpenKM Community Edition, OpenKM Professional Edition — terrasystemlabs.com/post?slug=openkm-zero-day-vulnerabiliti… Clear all filters
TI-2026-31006 CVE-2026-42785 · GHSA-w8q9-g33h-9x9m

OpenKM 6.3.12 Remote Code Execution via Administrative Scripting

Priority HIGH 72

OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary Java/BeanShell code through the /admin/Scripting endpoint.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00679 Published 2026-05-26 No fix listed CWE-94
TI-2026-30715 CVE-2026-42425 · GHSA-2445-qj53-662g

OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery

Priority HIGH 72

OpenKM 6.3.12 contains an unrestricted SQL execution vulnerability that allows authenticated administrative users to execute arbitrary SQL statements against the application database via the DatabaseQuery interface.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00641 Published 2026-05-26 No fix listed CWE-89
TI-2026-30319 CVE-2026-41917 · GHSA-hf34-4jm2-f8qq

OpenKM 6.3.12 Local File Inclusion via Admin Scripting

Priority MEDIUM 64

OpenKM 6.3.12 contains a local file inclusion vulnerability in the administrative scripting interface at /admin/Scripting that allows authenticated administrators to read arbitrary files by supplying an attacker-controll…

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00387 Published 2026-05-26 No fix listed CWE-22