PatchTheCVEofcms vulnerabilities and fixes
Recent CVEs affecting ofcms, with upgrade or downgrade steps. 4 tracked.
ofcms has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-22. Highest priority: CVE-2024-48236 (score 41/100).
- CVE-2025-1557 MEDIUM 4.3 DOWNGRADE A vulnerability, which was classified as problematic, was found in OFCMS 1.1.3
- CVE-2024-9411 LOW 3.5 DOWNGRADE A vulnerability classified as problematic has been found in OFCMS 1.1.2
- CVE-2024-48236 MEDIUM 6.5 DOWNGRADE An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function i
- CVE-2024-48235 MEDIUM 6.5 DOWNGRADE An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the Template
FAQ
How do I fix ofcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ofcms being exploited right now?
None of the tracked ofcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ofcms CVE should I patch first?
CVE-2024-48236 currently ranks highest (41/100): An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function i.