OpenKM vulnerabilities
7 published CVEs name OpenKM among the affected products.
- 7Published CVEs7 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-42785
OpenKM 6.3.12 Remote Code Execution via Administrative Scripting
Openkm · OpenKM Community Edition
High8.6 - CVE-2026-42425
OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery
Openkm · OpenKM Community Edition
High8.6 - CVE-2026-41917
OpenKM 6.3.12 Local File Inclusion via Admin Scripting
Openkm · OpenKM Community Edition
Medium6.9 - CVE-2022-47414
If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.
OpenKM · OpenKM
Medium5.4 - CVE-2022-47413
Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II") XSS condition.
OpenKM · OpenKM
Medium5.4 - CVE-2022-2131
OpenKM XXE Injection
OpenKM · OpenKM Document Management Community
High8.5 - CVE-2021-3628
OpenKM Document Management Community vulnerable to Cross Site Scripting
OpenKM · Document Management Community
Medium4.6