c
concrete5
Security Risk Profile
86
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 23, 2011 to present
10
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
5.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
86/100
critical
Severity Distribution
Critical
1High
0Medium
9Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
7
2
Infoleak
2
Most Affected Products
1. concrete5 concrete529
2. ConcreteCMS Concrete CMS17
3. composer/concrete5/concrete53
4. concrete5 Concrete3
5. concrete5 Concrete5 CMS1
Recent Vulnerabilities
See more →CVE-2022-50807
CVSS 9.8critical
Concrete5 CME 9.1.3 - Xpath injection
Jan 13, 2026🔧 No Patch
CVE-2017-6908
CVSS 6.1medium
Mar 15, 2017
CVE-2017-6905
CVSS 6.1medium
Mar 15, 2017🔧 No Patch
CVE-2015-2250
CVSS 4.3medium
May 15, 2015
CVE-2015-3989
CVSS 4.3medium
May 15, 2015
CVE-2014-9526
CVSS 4.3medium
Jan 5, 2015🔧 No Patch
CVE-2014-5108
CVSS 4.3medium
Jul 28, 2014🔧 No Patch
CVE-2014-5107
CVSS 5.0medium
Jul 28, 2014🔧 No Patch
CVE-2012-5181
CVSS 4.3medium
Dec 21, 2012
CVE-2011-3721
CVSS 5.0medium
Sep 23, 2011🔧 No Patch
Monitor concrete5 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.