subrion vulnerabilities

Products

• subrion cms 3

Latest subrion CVEs

Newest publication first

1. CVE-2023-46947 Subrion remote command execution vulnerability

   Published 2023-11-03

   High·CVSS 8.8 EPSS 1.5%

   Subrion 4.2.1 has a remote command execution vulnerability in the backend.

2. CVE-2018-14836 Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to t...

   Published 2018-08-02

   Medium·CVSS 6.5 EPSS 1.00%

   Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to the Admin panel.

3. CVE-2018-14835 Subrion CMS XSS

   Published 2018-08-02

   Medium·CVSS 5.4 EPSS 0.73%

   Subrion CMS v4.2.1 is vulnerable to Stored XSS because of no escaping added to the tooltip information being displayed in multiple areas.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.