VendorsOrckestrac1_cmsany version
Vulnerabilities

Orckestra C1 CMS any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2022-39256
Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.
Published 2022-09-27 · Modified
9.0EPSS 0.016
CVE-2019-18211
An issue was discovered in Orckestra C1 CMS through 6.6. The EntityTokenSerializer class in Composite.dll is prone to unvalidated deserialization of wrapped BinaryFormatter payloads, leading to arbitrary remote code execution for any low-privilege user.
Published 2019-12-23 · Modified
8.8EPSS 0.026
CVE-2022-24789
Deserialization of untrusted data in C1 CMS.
Published 2022-03-28 · Modified
7.6EPSS 0.008