apprain vulnerabilities and fixes

Recent CVEs affecting apprain, with upgrade or downgrade steps. 33 tracked.

apprain has 33 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-10. Highest priority: CVE-2024-58279 (score 51/100).

• CVE-2025-41036 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41044 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41052 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2024-58279 HIGH 8.8 DOWNGRADE appRain CMF 4.0.5 contains an authenticated remote code execution vulnerability that allows administrative use
• CVE-2025-41063 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in version 4.0.5 of appRain CMF, consisting of an authenticated reflected
• CVE-2025-41062 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in version 4.0.5 of appRain CMF, consisting of an authenticated reflected
• CVE-2025-41061 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41060 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41059 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41058 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41057 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41056 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41055 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41054 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41053 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41051 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41050 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41049 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41048 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41047 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41046 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41045 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41043 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41042 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41041 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41040 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41039 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41038 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41037 MEDIUM 5.4 DOWNGRADE A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due
• CVE-2025-41035 MEDIUM 6.5 DOWNGRADE A problem has been discovered in appRain CMF 4.0.5
• CVE-2025-41034 CRITICAL 9.8 DOWNGRADE An SQL injection vulnerability has been found in appRain CMF 4.0.5
• CVE-2025-41033 CRITICAL 9.8 DOWNGRADE An SQL injection vulnerability has been found in appRain CMF 4.0.5
• CVE-2025-41032 CRITICAL 9.8 DOWNGRADE An SQL injection vulnerability has been found in appRain CMF 4.0.5

FAQ

How do I fix apprain vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is apprain being exploited right now?

None of the tracked apprain CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which apprain CVE should I patch first?

CVE-2024-58279 currently ranks highest (51/100): appRain CMF 4.0.5 contains an authenticated remote code execution vulnerability that allows administrative use.

RSS feed for apprain · ← Back to latest CVEs