{"schema_version":1,"title":"org.opencms:opencms-core (Maven) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 31 vulnerabilities in org.opencms:opencms-core (Maven): 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2023-42343, was published on 8 May 2026.","url":"https://junglewise.ai/threats/technologies/org-opencms-opencms-core","json_url":"https://junglewise.ai/threats/technologies/org-opencms-opencms-core.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/org-opencms-opencms-core","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":2,"all_time":31,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":4},"latest":[{"cve":"CVE-2023-42343","cvss":6.1,"epss":0.0059,"slug":"cve-2023-42343-alkacon-opencms-xss-in-cmis-online-type","title":"Alkacon OpenCms XSS in cmis-online/type","severity":"medium","exploited":false,"published_at":"2026-05-08T06:32:37+00:00","url":"https://junglewise.ai/threats/cve-2023-42343-alkacon-opencms-xss-in-cmis-online-type"},{"cve":"CVE-2023-42345","cvss":6.1,"epss":0.0015,"slug":"cve-2023-42345-alkacon-opencms-xss-in-updatemodelgroups-jsp","title":"Alkacon OpenCms XSS in updateModelGroups.jsp","severity":"medium","exploited":false,"published_at":"2026-05-08T06:32:37+00:00","url":"https://junglewise.ai/threats/cve-2023-42345-alkacon-opencms-xss-in-updatemodelgroups-jsp"},{"cve":"CVE-2023-42344","cvss":7.3,"epss":0.0223,"slug":"cve-2023-42344-alkacon-opencms-xxe-in-chemistry-servlet","title":"Alkacon OpenCms XXE in Chemistry servlet","severity":"high","exploited":false,"published_at":"2026-05-08T06:32:37+00:00","url":"https://junglewise.ai/threats/cve-2023-42344-alkacon-opencms-xxe-in-chemistry-servlet"},{"cve":"CVE-2023-42346","cvss":7.5,"epss":0.0023,"slug":"cve-2023-42346-alkacon-opencms-xxe-in-cmis-atompub-servlet","title":"Alkacon OpenCms XXE in CMIS AtomPub servlet","severity":"high","exploited":false,"published_at":"2026-05-08T05:16:09.85+00:00","url":"https://junglewise.ai/threats/cve-2023-42346-alkacon-opencms-xxe-in-cmis-atompub-servlet"},{"cve":"CVE-2024-42699","cvss":4,"epss":0.0035,"slug":"cve-2024-42699-opencms-cross-site-scripting-vulnerability","title":"OpenCMS Cross-Site Scripting vulnerability","severity":"medium","exploited":false,"published_at":"2025-04-21T15:31:25+00:00","url":"https://junglewise.ai/threats/cve-2024-42699-opencms-cross-site-scripting-vulnerability"},{"cve":"CVE-2024-41446","cvss":3.1,"epss":0.0026,"slug":"cve-2024-41446-opencms-cross-site-scripting-xss-vulnerability","title":"OpenCMS cross-site scripting (XSS) vulnerability","severity":"low","exploited":false,"published_at":"2025-04-21T15:31:23+00:00","url":"https://junglewise.ai/threats/cve-2024-41446-opencms-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2024-41447","cvss":3.1,"epss":0.0026,"slug":"cve-2024-41447-alkacon-opencms-stored-cross-site-scripting-xss-vulnerability","title":"Alkacon OpenCMS stored cross-site scripting (XSS) vulnerability","severity":"low","exploited":false,"published_at":"2025-04-18T18:31:24+00:00","url":"https://junglewise.ai/threats/cve-2024-41447-alkacon-opencms-stored-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2024-5520","cvss":3.1,"epss":0.0028,"slug":"cve-2024-5520-opencms-cross-site-scripting-vulnerability","title":"OpenCMS Cross-Site Scripting vulnerability","severity":"low","exploited":false,"published_at":"2024-05-30T19:49:04+00:00","url":"https://junglewise.ai/threats/cve-2024-5520-opencms-cross-site-scripting-vulnerability"},{"cve":"CVE-2023-6379","cvss":3.1,"epss":0.0175,"slug":"cve-2023-6379-alkacon-opencms-xss-via-mercury-template","title":"Alkacon OpenCMS XSS via Mercury template","severity":"low","exploited":false,"published_at":"2023-12-13T12:30:43+00:00","url":"https://junglewise.ai/threats/cve-2023-6379-alkacon-opencms-xss-via-mercury-template"},{"cve":"CVE-2023-37602","cvss":3.1,"epss":0.0061,"slug":"cve-2023-37602-alkacon-opencms-arbitrary-file-upload-vulnerability","title":"Alkacon OpenCMS arbitrary file upload vulnerability","severity":"low","exploited":false,"published_at":"2023-07-20T21:30:58+00:00","url":"https://junglewise.ai/threats/cve-2023-37602-alkacon-opencms-arbitrary-file-upload-vulnerability"},{"cve":"CVE-2023-31544","cvss":3.1,"epss":0.004,"slug":"cve-2023-31544-alkacon-opencms-vulnerable-to-stored-cross-site-scripting","title":"alkacon-OpenCMS vulnerable to stored Cross-site Scripting","severity":"low","exploited":false,"published_at":"2023-05-16T21:30:23+00:00","url":"https://junglewise.ai/threats/cve-2023-31544-alkacon-opencms-vulnerable-to-stored-cross-site-scripting"},{"cve":"CVE-2019-11818","cvss":4,"epss":0.0077,"slug":"cve-2019-11818-alkacon-opencms-xss-via-new-user-module","title":"Alkacon OpenCMS XSS via New User module","severity":"medium","exploited":false,"published_at":"2022-05-24T21:59:46+00:00","url":"https://junglewise.ai/threats/cve-2019-11818-alkacon-opencms-xss-via-new-user-module"},{"cve":"CVE-2019-11819","cvss":3,"epss":0.01,"slug":"cve-2019-11819-alkacon-opencms-csv-injection-via-new-user-module","title":"Alkacon OpenCMS CSV Injection via New User module","severity":"low","exploited":false,"published_at":"2022-05-24T16:45:21+00:00","url":"https://junglewise.ai/threats/cve-2019-11819-alkacon-opencms-csv-injection-via-new-user-module"},{"cve":"CVE-2013-4600","cvss":4,"epss":0.0187,"slug":"cve-2013-4600-alkacon-opencms-xss-via-title-and-requestedresource-parameters","title":"Alkacon OpenCMS XSS via title and requestedResource parameters","severity":"medium","exploited":false,"published_at":"2022-05-17T05:07:03+00:00","url":"https://junglewise.ai/threats/cve-2013-4600-alkacon-opencms-xss-via-title-and-requestedresource-parameters"},{"cve":"CVE-2015-2351","cvss":4,"epss":0.0189,"slug":"cve-2015-2351-alkacon-opencms-xss-via-homelink-workplaceresource-mode-and-query","title":"Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters","severity":"medium","exploited":false,"published_at":"2022-05-14T02:49:19+00:00","url":"https://junglewise.ai/threats/cve-2015-2351-alkacon-opencms-xss-via-homelink-workplaceresource-mode-and-query"},{"cve":"CVE-2008-1753","cvss":4,"epss":0.0111,"slug":"cve-2008-1753-alkacon-opencms-xss-via-searchfilter-parameter-in-system-workplace","title":"Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp","severity":"medium","exploited":false,"published_at":"2022-05-01T23:43:14+00:00","url":"https://junglewise.ai/threats/cve-2008-1753-alkacon-opencms-xss-via-searchfilter-parameter-in-system-workplace"},{"cve":"CVE-2008-1510","cvss":4,"epss":0.0146,"slug":"cve-2008-1510-alkacon-opencms-xss-via-searchfilter-or-listsearchfilter-parameter","title":"Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter","severity":"medium","exploited":false,"published_at":"2022-05-01T23:40:54+00:00","url":"https://junglewise.ai/threats/cve-2008-1510-alkacon-opencms-xss-via-searchfilter-or-listsearchfilter-parameter"},{"cve":"CVE-2008-1301","cvss":4,"epss":0.0226,"slug":"cve-2008-1301-alkacon-opencms-absolute-path-traversal-via-pathname-in-filepath-0","title":"Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter","severity":"medium","exploited":false,"published_at":"2022-05-01T23:38:45+00:00","url":"https://junglewise.ai/threats/cve-2008-1301-alkacon-opencms-absolute-path-traversal-via-pathname-in-filepath-0"},{"cve":"CVE-2008-1300","cvss":4,"epss":0.0151,"slug":"cve-2008-1300-alkacon-open-cms-xss-via-logfile-viewer-settings-function","title":"Alkacon Open CMS XSS via Logfile Viewer Settings function","severity":"medium","exploited":false,"published_at":"2022-05-01T23:38:45+00:00","url":"https://junglewise.ai/threats/cve-2008-1300-alkacon-open-cms-xss-via-logfile-viewer-settings-function"},{"cve":"CVE-2008-1045","cvss":4,"epss":0.0147,"slug":"cve-2008-1045-alkacon-opencms-xss-via-file-tree-navigation-in-system-workplace","title":"Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp","severity":"medium","exploited":false,"published_at":"2022-05-01T23:36:05+00:00","url":"https://junglewise.ai/threats/cve-2008-1045-alkacon-opencms-xss-via-file-tree-navigation-in-system-workplace"},{"cve":"CVE-2006-3936","epss":0.0138,"slug":"cve-2006-3936-alkacon-opencms-exposes-jsp-source-code","title":"Alkacon OpenCms Exposes JSP Source Code","severity":"info","exploited":false,"published_at":"2022-05-01T07:13:46+00:00","url":"https://junglewise.ai/threats/cve-2006-3936-alkacon-opencms-exposes-jsp-source-code"},{"cve":"CVE-2006-3935","cvss":4,"epss":0.0185,"slug":"cve-2006-3935-alkacon-opencms-improper-access-control-via-system-workplace-views","title":"Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp","severity":"medium","exploited":false,"published_at":"2022-05-01T07:13:46+00:00","url":"https://junglewise.ai/threats/cve-2006-3935-alkacon-opencms-improper-access-control-via-system-workplace-views"},{"cve":"CVE-2006-3934","cvss":4,"epss":0.0146,"slug":"cve-2006-3934-alkacon-opencms-absolute-path-traversal-via-pathname-in-filepath","title":"Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter","severity":"medium","exploited":false,"published_at":"2022-05-01T07:13:43+00:00","url":"https://junglewise.ai/threats/cve-2006-3934-alkacon-opencms-absolute-path-traversal-via-pathname-in-filepath"},{"cve":"CVE-2006-3933","cvss":4,"epss":0.0112,"slug":"cve-2006-3933-alkacon-opencms-xss-via-unsanitized-message-body","title":"Alkacon OpenCms XSS via unsanitized message body","severity":"medium","exploited":false,"published_at":"2022-05-01T07:13:43+00:00","url":"https://junglewise.ai/threats/cve-2006-3933-alkacon-opencms-xss-via-unsanitized-message-body"},{"cve":"CVE-2006-2571","cvss":4,"epss":0.0136,"slug":"cve-2006-2571-alkacon-opencms-xss-via-query-parameter-in-a-search-action","title":"Alkacon OpenCms XSS via query parameter in a search action","severity":"medium","exploited":false,"published_at":"2022-05-01T07:00:27+00:00","url":"https://junglewise.ai/threats/cve-2006-2571-alkacon-opencms-xss-via-query-parameter-in-a-search-action"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"org.keycloak:keycloak-services (Maven)","slug":"org-keycloak-keycloak-services","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/org-keycloak-keycloak-services"},{"name":"ai.h2o:h2o-core (Maven)","slug":"ai-h2o-h2o-core","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/ai-h2o-h2o-core"},{"name":"org.webjars.npm:jquery (Maven)","slug":"org-webjars-npm-jquery","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/org-webjars-npm-jquery"},{"name":"io.openremote:openremote-manager (Maven)","slug":"io-openremote-openremote-manager","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/io-openremote-openremote-manager"},{"name":"org.webjars.npm:jquery-ui (Maven)","slug":"org-webjars-npm-jquery-ui","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/org-webjars-npm-jquery-ui"},{"name":"org.yamcs:yamcs-core (Maven)","slug":"org-yamcs-yamcs-core","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/org-yamcs-yamcs-core"},{"name":"com.rabbitmq:amqp-client (Maven)","slug":"com-rabbitmq-amqp-client","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/com-rabbitmq-amqp-client"},{"name":"org.pytorch:executorch-android (Maven)","slug":"org-pytorch-executorch-android","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/org-pytorch-executorch-android"},{"name":"org.apache.dolphinscheduler:dolphinscheduler-api (Maven)","slug":"org-apache-dolphinscheduler-dolphinscheduler-api","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/org-apache-dolphinscheduler-dolphinscheduler-api"},{"name":"org.openidentityplatform.openam:openam-oauth2 (Maven)","slug":"org-openidentityplatform-openam-openam-oauth2","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/org-openidentityplatform-openam-openam-oauth2"},{"name":"org.webjars:bootstrap (Maven)","slug":"org-webjars-bootstrap","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/org-webjars-bootstrap"},{"name":"ca.uhn.hapi.fhir:org.hl7.fhir.validation (Maven)","slug":"ca-uhn-hapi-fhir-org-hl7-fhir-validation","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/ca-uhn-hapi-fhir-org-hl7-fhir-validation"}],"technology":{"hub":true,"name":"org.opencms:opencms-core (Maven)","slug":"org-opencms-opencms-core","vendor":{"name":"Maven","slug":"maven","url":"https://junglewise.ai/threats/vendors/maven"},"aliases":[],"homepage":"https://www.opencms.org/","repo_url":"https://github.com/alkacon/opencms-core","description":"The core library for OpenCms, an open-source content management system based on Java and XML.","url":"https://junglewise.ai/threats/technologies/org-opencms-opencms-core"},"most_severe":[{"cve":"CVE-2023-42346","cvss":7.5,"epss":0.0023,"slug":"cve-2023-42346-alkacon-opencms-xxe-in-cmis-atompub-servlet","title":"Alkacon OpenCms XXE in CMIS AtomPub servlet","severity":"high","exploited":false,"published_at":"2026-05-08T05:16:09.85+00:00","url":"https://junglewise.ai/threats/cve-2023-42346-alkacon-opencms-xxe-in-cmis-atompub-servlet"},{"cve":"CVE-2023-42344","cvss":7.3,"epss":0.0223,"slug":"cve-2023-42344-alkacon-opencms-xxe-in-chemistry-servlet","title":"Alkacon OpenCms XXE in Chemistry servlet","severity":"high","exploited":false,"published_at":"2026-05-08T06:32:37+00:00","url":"https://junglewise.ai/threats/cve-2023-42344-alkacon-opencms-xxe-in-chemistry-servlet"},{"cve":"CVE-2023-42343","cvss":6.1,"epss":0.0059,"slug":"cve-2023-42343-alkacon-opencms-xss-in-cmis-online-type","title":"Alkacon OpenCms XSS in cmis-online/type","severity":"medium","exploited":false,"published_at":"2026-05-08T06:32:37+00:00","url":"https://junglewise.ai/threats/cve-2023-42343-alkacon-opencms-xss-in-cmis-online-type"},{"cve":"CVE-2023-42345","cvss":6.1,"epss":0.0015,"slug":"cve-2023-42345-alkacon-opencms-xss-in-updatemodelgroups-jsp","title":"Alkacon OpenCms XSS in updateModelGroups.jsp","severity":"medium","exploited":false,"published_at":"2026-05-08T06:32:37+00:00","url":"https://junglewise.ai/threats/cve-2023-42345-alkacon-opencms-xss-in-updatemodelgroups-jsp"},{"cve":"CVE-2008-1301","cvss":4,"epss":0.0226,"slug":"cve-2008-1301-alkacon-opencms-absolute-path-traversal-via-pathname-in-filepath-0","title":"Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter","severity":"medium","exploited":false,"published_at":"2022-05-01T23:38:45+00:00","url":"https://junglewise.ai/threats/cve-2008-1301-alkacon-opencms-absolute-path-traversal-via-pathname-in-filepath-0"},{"cve":"CVE-2015-2351","cvss":4,"epss":0.0189,"slug":"cve-2015-2351-alkacon-opencms-xss-via-homelink-workplaceresource-mode-and-query","title":"Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters","severity":"medium","exploited":false,"published_at":"2022-05-14T02:49:19+00:00","url":"https://junglewise.ai/threats/cve-2015-2351-alkacon-opencms-xss-via-homelink-workplaceresource-mode-and-query"},{"cve":"CVE-2013-4600","cvss":4,"epss":0.0187,"slug":"cve-2013-4600-alkacon-opencms-xss-via-title-and-requestedresource-parameters","title":"Alkacon OpenCMS XSS via title and requestedResource parameters","severity":"medium","exploited":false,"published_at":"2022-05-17T05:07:03+00:00","url":"https://junglewise.ai/threats/cve-2013-4600-alkacon-opencms-xss-via-title-and-requestedresource-parameters"},{"cve":"CVE-2006-3935","cvss":4,"epss":0.0185,"slug":"cve-2006-3935-alkacon-opencms-improper-access-control-via-system-workplace-views","title":"Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp","severity":"medium","exploited":false,"published_at":"2022-05-01T07:13:46+00:00","url":"https://junglewise.ai/threats/cve-2006-3935-alkacon-opencms-improper-access-control-via-system-workplace-views"},{"cve":"CVE-2008-1300","cvss":4,"epss":0.0151,"slug":"cve-2008-1300-alkacon-open-cms-xss-via-logfile-viewer-settings-function","title":"Alkacon Open CMS XSS via Logfile Viewer Settings function","severity":"medium","exploited":false,"published_at":"2022-05-01T23:38:45+00:00","url":"https://junglewise.ai/threats/cve-2008-1300-alkacon-open-cms-xss-via-logfile-viewer-settings-function"},{"cve":"CVE-2008-1045","cvss":4,"epss":0.0147,"slug":"cve-2008-1045-alkacon-opencms-xss-via-file-tree-navigation-in-system-workplace","title":"Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp","severity":"medium","exploited":false,"published_at":"2022-05-01T23:36:05+00:00","url":"https://junglewise.ai/threats/cve-2008-1045-alkacon-opencms-xss-via-file-tree-navigation-in-system-workplace"}],"generated_at":"2026-09-26T15:07:00.181821+00:00"}