Login Request a demo
AC
Vendor
Acquia
6 products with CVEs on record
44
CVEs
0
On KEV
0
New 30D
Products
MA
Mautic
Acquia
9.9
36 CVEs0 on KEV0 new
CO
Commons
Acquia
–
3 CVEs0 on KEV0 new
DA
Dam
Acquia
7.5
2 CVEs0 on KEV0 new
AC
Acquia Content Hub
Acquia
8.1
1 CVEs0 on KEV0 new
CG
Commons Group
Acquia
–
1 CVEs0 on KEV0 new
MO
Mollom
Acquia
7.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-3105
MA
Mautic
Acquia
8.8
0%
Feb 24SQL Injection in Contact Activity API Sorting
CVE-2025-14472
AC
Acquia Content Hub
Acquia
8.1
0%
Jan 28Acquia Content Hub - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-125
CVE-2025-9954
DA
Dam
Acquia
7.5
0%
Oct 29Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105
CVE-2024-47055
MA
Mautic
Acquia
4.3
0%
May 28Segment cloning doesn't have a proper permission check
CVE-2024-47051
MA
Mautic
Acquia
9.9
2%
Feb 26Remote Code Execution & File Deletion in Asset Uploads
CVE-2024-47053
MA
Mautic
Acquia
7.7
1%
Feb 26Improper Authorization in Reporting API
CVE-2022-25773
MA
Mautic
Acquia
5.4
1%
Feb 26Relative Path Traversal in assets file upload
CVE-2024-13261
DA
Dam
Acquia
3.5
0%
Jan 9Acquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-025
CVE-2022-25770
MA
Mautic
Acquia
7.5
0%
Sep 18Insufficient authentication in upgrade flow
CVE-2024-47059
MA
Mautic
Acquia
4.3
0%
Sep 18Users enumeration - weak password login
CVE-2021-27917
MA
Mautic
Acquia
5.4
0%
Sep 18XSS in contact tracking and page hits report
CVE-2024-47050
MA
Mautic
Acquia
6.1
0%
Sep 18XSS in contact/company tracking (no authentication)
CVE-2024-47058
MA
Mautic
Acquia
4.8
0%
Sep 18Cross-site Scripting (XSS) - stored (edit form HTML field)
CVE-2022-25768
MA
Mautic
Acquia
6.5
0%
Sep 18Improper Access Control in UI upgrade process
CVE-2022-25777
MA
Mautic
Acquia
6.5
0%
Sep 18Server-Side Request Forgery in Asset section
CVE-2022-25776
MA
Mautic
Acquia
6.5
0%
Sep 18Sensitive Data Exposure due to inadequate user permission settings
CVE-2022-25775
MA
Mautic
Acquia
7.2
1%
Sep 18SQL Injection in dynamic Reports
CVE-2022-25774
MA
Mautic
Acquia
5.4
0%
Sep 18XSS in Notifications via saving Dashboards
CVE-2022-25769
MA
Mautic
Acquia
9.1
1%
Sep 18Improper regex in htaccess file
CVE-2021-27916
MA
Mautic
Acquia
8.1
1%
Sep 17Relative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder)
CVE-2021-27915
MA
Mautic
Acquia
9.0
1%
Sep 17XSS Cross-site Scripting Stored (XSS) - Description field
CVE-2024-2731
MA
Mautic
Acquia
5.4
0%
Apr 10Improper Access Control Issues Lead to Sensitive Data Exposure in Mautic
CVE-2022-25772
MA
Mautic
Acquia
6.1
63%
Jun 20A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript
CVE-2021-27914
MA
Mautic
Acquia
4.8
0%
Jun 1A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript
CVE-2021-27913
MA
Mautic
Acquia
3.5
0%
Aug 30The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of…
CVE-2021-27912
MA
Mautic
Acquia
5.4
1%
Aug 30Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a…
CVE-2021-27911
MA
Mautic
Acquia
6.1
1%
Aug 30Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack through the contact's first or last name and triggered when viewing a contact's details page then…
CVE-2021-27910
MA
Mautic
Acquia
6.1
1%
Aug 30Insufficient sanitization / filtering allows for arbitrary JavaScript Injection in Mautic using the bounce management callback function
CVE-2021-27909
MA
Mautic
Acquia
6.1
4%
Aug 30For Mautic versions prior to 3.3.4/4.0.0, there is an XSS vulnerability on Mautic's password reset page where a vulnerable parameter, "bundle," in the URL could allow an attacker…
CVE-2021-27908
MA
Mautic
Acquia
4.4
0%
Mar 23In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user through leveraging Symfony parameter…
CVE-2020-35125
MA
Mautic
Acquia
9.6
3%
Feb 9A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript via mautic[return] (a different…
CVE-2020-35124
MA
Mautic
Acquia
9.6
2%
Jan 28A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript through the Referer header of…
CVE-2020-35128
MA
Mautic
Acquia
9.0
2%
Jan 19Mautic before 3.2.4 is affected by stored XSS
CVE-2018-11200
MA
Mautic
Acquia
6.1
1%
Sep 20An issue was discovered in Mautic 2.13.1
CVE-2018-11198
MA
Mautic
Acquia
6.1
1%
Sep 6An issue was discovered in Mautic 2.13.1
CVE-2017-1000490
MA
Mautic
Acquia
6.5
1%
Jan 3Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the…
CVE-2017-1000489
MA
Mautic
Acquia
8.1
1%
Jan 3Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address
CVE-2017-1000488
MA
Mautic
Acquia
6.1
1%
Jan 3Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form
CVE-2017-8874
MA
Mautic
Acquia
8.8
1%
May 10Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email…
CVE-2015-8754
MO
Mollom
Acquia
7.5
1%
Jan 8The Mollom module 6.x-2.7 before 6.x-2.15 for Drupal allows remote attackers to bypass intended access restrictions and modify the mollom blacklist via unspecified vectors
CVE-2013-1908
CO
Commons
Acquia
–
3%
Jul 16The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to…
CVE-2013-1907
CO
Commons
Acquia
–
3%
Jul 16The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to…
CVE-2012-4483
CO
Commons
Acquia
–
1%
Oct 31The commons_discussion_views_default_views function in modules/features/commons_discussion/commons_discussion.views_default.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8…