a
alfresco
Security Risk Profile
33
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 22 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 2, 2014 to present
22
Total CVEs
7
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
33/100
low
Severity Distribution
Critical
4High
3Medium
14Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
XSS
7
2
Input Validation
3
3
SSRF
3
4
CSRF
2
5
Code Injection
1
Most Affected Products
1. Alfresco Alfresco17
2. Alfresco Alfresco Content Services12
3. Alfresco share8
4. Alfresco Reset Password Alfresco2
5. Alfresco Activiti1
Recent Vulnerabilities
See more →CVE-2026-3967
CVSS 5.3EPSS 0%medium
Alfresco Activiti Process Variable Serialization System SerializableType.java createObjectInputStream deserialization
Mar 12, 2026🔧 No Patch
CVE-2024-29309
CVSS 7.7high
May 2, 2024🔧 No Patch
CVE-2020-18327
CVSS 6.1medium
Mar 4, 2022🔧 No Patch
CVE-2021-41792
CVSS 5.3medium
Oct 21, 2021🔧 No Patch
CVE-2021-41791
CVSS 5.4medium
Oct 21, 2021🔧 No Patch
CVE-2021-41790
CVSS 8.8high
Oct 21, 2021🔧 No Patch
CVE-2020-15181
CVSS 10.0critical
Admin account takeover in Alfresco Reset Password
Sep 18, 2020
CVE-2020-25728
CVSS 8.8high
Sep 17, 2020🔧 No Patch
GHSL-2020-039
unknown
Server-side template injection in Alfresco - CVE-2020-12873
Jul 15, 2020🔧 No Patch
CVE-2020-8778
CVSS 5.4medium
Mar 2, 2020🔧 No Patch
Monitor alfresco in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.