What’s Vulnerable › Products

OFCMS vulnerabilities

24 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your OFCMS version is affected

Latest OFCMS vulnerabilities

• CVE-2026-10204 — OFCMS JSON Query SysUserController.java query sql injection (CVSS 6.3)
• CVE-2026-10203 — OFCMS JSON Query SystemParamController.java query sql injection (CVSS 6.3)
• CVE-2026-10202 — OFCMS JSON Query SystemDictController.java query sql injection (CVSS 6.3)
• CVE-2026-10193 — OFCMS ComnController ComnController.java query sql injection (CVSS 6.3)
• CVE-2025-1557 — OFCMS cross-site request forgery (CVSS 4.3)
• CVE-2024-48236 — (CVSS 6.5)
• CVE-2024-48235 — (CVSS 6.5)
• CVE-2024-9411 — OFCMS add.json add cross site scripting (CVSS 3.5)
• CVE-2024-34256 — (CVSS 9.8)
• CVE-2023-51807 — (CVSS 5.4)
• CVE-2023-24760 — (CVSS 8.8)
• CVE-2022-29653 — (CVSS 6.1)
• CVE-2022-27961 — (CVSS 5.4)
• CVE-2022-27960 — (CVSS 5.4)
• CVE-2019-9617 — (CVSS 8.8)
• CVE-2019-9616 — (CVSS 7.2)
• CVE-2019-9615 — (CVSS 7.2)
• CVE-2019-9614 — (CVSS 8.8)
• CVE-2019-9613 — (CVSS 7.2)
• CVE-2019-9612 — (CVSS 8.8)
• CVE-2019-9611 — (CVSS 6.5)
• CVE-2019-9610 — (CVSS 4.3)
• CVE-2019-9609 — (CVSS 8.8)
• CVE-2019-9608 — (CVSS 8.8)