OpenKM Vulnerabilities and Affected Products
Vulnerabilities associated with OpenKM Document Management Community.
Products
Clear product- OpenKM3 vulnerabilities
- OpenKM Community Edition3 vulnerabilities
- OpenKM Professional Edition3 vulnerabilities
- Document Management Community1 vulnerability
- OpenKM Document Management Community1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-2131HIGH | OpenKM XXE InjectionOpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file without the required security flags, allowing an attacker to perform a XML external entity injection attack. CWE-611Jul 25, 2022 | CVSS8.5v3.1 | EPSS0.849% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |