Cm3 Acora Content Management System vulnerabilities

Product

Cm3 Acora Content Management System

by Ddsn · last CVE Feb 20, 2025

CVEs

On KEV

8.1

Max CVSS

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 1Medium 1Low 0

Severity

All severities9 Critical0 High1 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Cm3 Acora Content Management System to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-22964	8.1	1%	Jan 15	DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the… Affected: 10.1.1
CVE-2025-25968	6.0	1%	Feb 20	DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability Affected: 10.1.1
CVE-2013-4728	–	1%	Jun 6	DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain sensitive information via a Affected: 5.5.0/1b-p1; 5.5.7/12b; 6.0.2/1a; 6.0.6/1a
CVE-2013-4727	–	3%	Jun 6	DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain sensitive information via a request to… Affected: 5.5.0/1b-p1; 5.5.7/12b; 6.0.2/1a; 6.0.6/1a
CVE-2013-4725	–	1%	Jun 6	DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not set the secure flag for an unspecified cookie in an https session,… Affected: 5.5.0/1b-p1; 5.5.7/12b; 6.0.2/1a; 6.0.6/1a
CVE-2013-4724	–	1%	Jun 6	DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not include the HTTPOnly flag in a Set-Cookie header for an… Affected: 5.5.0/1b-p1; 5.5.7/12b; 6.0.2/1a; 6.0.6/1a
CVE-2013-4726	–	1%	Apr 25	Cross-site request forgery (CSRF) vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers… Affected: 5.5.0/1b-p1; 5.5.7/12b; 6.0.2/1a; 6.0.6/1a
CVE-2013-4723	–	2%	Apr 25	Open redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allows remote attackers to redirect users to… Affected: 5.5.0/1b-p1; 5.5.7/12b; 6.0.2/1a; 6.0.6/1a
CVE-2013-4722	–	2%	Apr 25	Multiple cross-site scripting (XSS) vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other… Affected: 5.5.0/1b-p1; 5.5.7/12b; 6.0.2/1a; 6.0.6/1a