PatchTheCVEcm3 acora content management system vulnerabilities and fixes
Recent CVEs affecting cm3 acora content management system, with upgrade or downgrade steps. 2 tracked.
Also searched as: cm3acoracontentmanagementsystem.
cm3 acora content management system has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-20. Highest priority: CVE-2025-22964 (score 44/100).
- CVE-2025-25968 MEDIUM 6.0 DOWNGRADE DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability
- CVE-2025-22964 HIGH 8.1 DOWNGRADE DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerabil
FAQ
How do I fix cm3 acora content management system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cm3 acora content management system being exploited right now?
None of the tracked cm3 acora content management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cm3 acora content management system CVE should I patch first?
CVE-2025-22964 currently ranks highest (44/100): DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerabil.