Tecnoteca Cmdbuild
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Tecnoteca Cmdbuild.
By the Year
In 2026 there have been 1 vulnerability in Tecnoteca Cmdbuild with an average score of 6.4 out of ten. Cmdbuild did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 6.40 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 1 | 6.50 |
It may take a day or so for new Cmdbuild vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Tecnoteca Cmdbuild Security Vulnerabilities
CMDBuild 3.3.2 Auth Stored XSS via Card & File Upload
CVE-2021-47925
6.4 - Medium
- May 10, 2026
CMDBuild 3.3.2 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject arbitrary web script or HTML via crafted input in card creation and file upload endpoints. Attackers can inject XSS payloads through Employee card parameters or SVG file attachments in the classes endpoint, which execute when other users view the affected records or preview attachments.
XSS
In CMDBuild from version 3.0 to 3.3.2 payload requests are saved in a temporary log table, which
CVE-2022-25518
6.5 - Medium
- March 22, 2022
In CMDBuild from version 3.0 to 3.3.2 payload requests are saved in a temporary log table, which allows attackers with database access to read the password of the users who login to the application by querying the database table.
Insertion of Sensitive Information into Log File
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Tecnoteca Cmdbuild or by Tecnoteca? Click the Watch button to subscribe.
