intelliants subrion cms

Name: intelliants subrion cms
Brand: intelliants

productUS

cpe:2.3:a:intelliants:subrion_cms:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical12high18medium0low

updated 2026-10-28

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-19422US	high7.2	64.5% (99th)	Exploit	no fix	2018-11-21	= 4.2.1
CVE-2012-5452US	medium4.3	5.08% (92nd)	Exploit	no fix	2012-10-22	= 2.2.1
CVE-2012-4771US	medium4.3	4.39% (91st)	Exploit	no fix	2012-10-22	4 versions
CVE-2011-5211US	medium4.3	3.86% (90th)	Exploit	no fix	2012-10-22	= 2.0.4
CVE-2012-4772US	high7.5	3.72% (90th)	Exploit	no fix	2012-10-22	4 versions
CVE-2012-4773US	medium6.8	3.49% (89th)	Exploit	no fix	2012-10-22	4 versions
CVE-2011-5212US	high7.5	3.42% (89th)	Exploit	no fix	2012-10-22	= 2.0.4
CVE-2020-35437US	medium6.1	3.07% (88th)	Exploit	no fix	2020-12-26	= 4.2.1
CVE-2020-18326US	high8.8	2.24% (83rd)	Exploit	no fix	2022-03-04	= 4.2.1
CVE-2020-18324US	medium6.1	2.17% (82nd)	Exploit	no fix	2022-03-04	= 4.2.1
CVE-2020-18325US	medium6.1	1.64% (76th)	Exploit	no fix	2022-03-04	= 4.2.1
CVE-2019-7357US	high8.8	1.36% (72nd)	Exploit	no fix	2020-11-10	= 4.2.1
CVE-2023-43875US	medium6.1	0.83% (57th)	Exploit	no fix	2023-10-19	= 4.2.1
CVE-2017-11444US	critical9.8	13.1% (96th)	—	no fix	2017-07-19	≤ 4.1.4
CVE-2017-6013US	critical9.8	1.51% (74th)	—	no fix	2017-03-27	= 4.0.5.10
CVE-2021-43464US	high8.8	1.42% (73rd)	—	no fix	2022-04-04	= 4.2.1
CVE-2015-4129US	medium6.5	1.34% (71st)	—	no fix	2015-07-05	≤ 3.3.2
CVE-2021-41947US	high7.2	1.18% (67th)	—	no fix	2021-10-08	= 4.2.1
CVE-2017-11445US	critical9.8	1.14% (66th)	—	no fix	2017-07-19	≤ 4.1.4
CVE-2019-11406US	medium6.1	0.95% (61st)	—	no fix	2019-05-08	= 4.2.1
CVE-2017-6069US	high8.8	0.72% (54th)	—	no fix	2017-03-27	= 4.0.5
CVE-2017-18366US	high8.8	0.65% (51st)	—	no fix	2019-04-15	= 4.1.5
CVE-2022-43121US	medium6.1	0.63% (50th)	—	no fix	2022-11-09	= 4.2.1
CVE-2020-22392US	medium5.4	0.62% (50th)	—	no fix	2021-08-05	= 4.2.2
CVE-2017-6068US	high8.8	0.61% (49th)	—	no fix	2017-03-27	= 4.0.5
CVE-2017-6066US	high8.8	0.59% (48th)	—	no fix	2017-03-27	= 4.0.5
CVE-2022-37059US	medium4.8	0.58% (47th)	—	no fix	2022-08-29	= 4.2.1
CVE-2018-16629US	medium4.8	0.56% (47th)	—	no fix	2018-12-04	= 4.2.1
CVE-2018-16631US	medium5.4	0.56% (46th)	—	no fix	2018-12-04	= 4.2.1
CVE-2021-41502US	medium5.4	0.55% (46th)	—	no fix	2022-06-11	= 4.2.1
CVE-2022-43120US	medium6.1	0.54% (45th)	—	no fix	2022-11-09	= 4.2.1
CVE-2021-43724US	medium4.8	0.49% (42nd)	—	no fix	2022-02-24	≤ 4.2.1
CVE-2017-6002US	high8.8	0.45% (39th)	—	no fix	2017-03-27	= 4.0.5.10
CVE-2024-25399US	—	0.35% (28th)	—	no fix	2024-02-27	= 4.2.1
CVE-2025-70958US	—	0.29% (22nd)	—	no fix	2026-02-02	= 4.2.1
CVE-2025-56556US	—	0.20% (10th)	—	no fix	2025-09-11	= 4.2.1

weaknesses (6)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')18 CVEs
CWE-352Cross-Site Request Forgery (CSRF)8 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')7 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-566Authorization Bypass Through User-Controlled SQL Primary Key1 CVEs
CWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE36 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan