U
Vendor security profile
umbraco
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical2
CISA KEV0
Public exploit2
Patch rate%43
Avg. CVSS7.6
12-month vulnerability rate
0
2
1
0
0
0
0
0
0
0
1
1
CVE KEV
CVE severity distribution
7toplam CVE
Critical2 (29%)
High1 (14%)
Medium4 (57%)
Patch and exploitation view
%43
Verified patch
%0
CISA KEV
%29
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
6.9
CVE-2021-47776Umbraco v8.14.1 - 'baseUrl' SSRF
Patch status unknownEPSS %0
10.0
CVE-2025-67288Unrestricted file upload in Umbraco Cms
Patch status unknownEPSS %1
4.9
CVE-2025-66625Information exposure in Umbraco Cms
Patch verifiedEPSS %0
6.5
CVE-2024-55488Cross-site scripting in Umbraco Cms
Patch status unknown Public Exploits:1EPSS %0
9.8
CVE-2021-33224Unrestricted file upload in Umbraco Forms
Patch status unknownEPSS %1