OpenKM vulnerabilities
7 published CVEs name OpenKM among the affected products.
- Published CVEs
- 7
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 4Low 0Not scored 0
CVEs per yearBy the year they were published
- 20211
- 20221
- 20232
- 20263
Newest CVEs
- CVE-2026-42785
OpenKM 6.3.12 Remote Code Execution via Administrative Scripting
Openkm · OpenKM Community Edition
High8.6 - CVE-2026-42425
OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery
Openkm · OpenKM Community Edition
High8.6 - CVE-2026-41917
OpenKM 6.3.12 Local File Inclusion via Admin Scripting
Openkm · OpenKM Community Edition
Medium6.9 - CVE-2022-47414
If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.
OpenKM · OpenKM
Medium5.4 - CVE-2022-47413
Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II") XSS condition.
OpenKM · OpenKM
Medium5.4 - CVE-2022-2131
OpenKM XXE Injection
OpenKM · OpenKM Document Management Community
High8.5 - CVE-2021-3628
OpenKM Document Management Community vulnerable to Cross Site Scripting
OpenKM · Document Management Community
Medium4.6