i
idreamsoft
Security Risk Profile
48
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 30 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 10, 2018 to present
30
Total CVEs
22
Critical+High
0
Exploited
21
Unpatched
Threat Assessment
Avg CVSS
8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
21
Critical/High
Risk Level
48/100
medium
Severity Distribution
Critical
10High
12Medium
7Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
CSRF
9
2
Path Traversal
8
3
XSS
4
4
SQL Injection
3
5
Code Injection
2
Most Affected Products
1. idreamsoft iCMS31
2. iCMS iCMS1
3. iCMS1
Recent Vulnerabilities
See more →CVE-2026-30661
CVSS 6.1medium
Mar 24, 2026🔧 No Patch
CVE-2025-15394
CVSS 2.0low
iCMS POST Parameter ConfigAdmincp.php save code injection
Dec 31, 2025🔧 No Patch
CVE-2023-40953
CVSS 8.8high
Sep 8, 2023🔧 No Patch
CVE-2023-39806
CVSS 9.8critical
Aug 10, 2023🔧 No Patch
CVE-2023-39805
CVSS 9.8critical
Aug 10, 2023🔧 No Patch
CVE-2022-41496
CVSS 9.8critical
Oct 13, 2022🔧 No Patch
CVE-2021-44977
CVSS 7.5high
Feb 4, 2022🔧 No Patch
CVE-2021-44978
CVSS 9.8critical
Feb 4, 2022🔧 No Patch
CVE-2020-21141
CVSS 8.8high
Nov 12, 2021🔧 No Patch
CVE-2020-26641
CVSS 8.8high
May 28, 2021🔧 No Patch
Monitor idreamsoft in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.