Vulnerabilities in Orckestra

3 results

CVE-2021-34992HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is rEPSS 4.1%CVE-2022-39256CRITICALOrckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.EPSS 1.2%CVE-2022-24789HIGH Deserialization of untrusted data in C1 CMS.EPSS 0.7%