Optimizely - vulnerabilities (CVEs)
15 CVEs in 3 products, 0 in the last 30 days, newest from 2025-07-28.
Products
- Configured Commerce - 8 CVEs
- Optimizely Cms - 4 CVEs
- Episerver Content Management System Cms - 3 CVEs
Newest CVEs of Optimizely
- CVE-2025-27801 - CVSS 4.8 (medium), 2025-07-28: The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an…
- CVE-2025-27800 - CVSS 4.8 (medium), 2025-07-28: The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an…
- CVE-2025-27802 - CVSS 4.8 (medium), 2025-07-28: The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an…
- CVE-2025-22386 - CVSS 7.3 (high), 2025-01-04: An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity session issue exists in the Commerce B2B application, affecting…
- CVE-2025-22388 - CVSS 5.7 (medium), 2025-01-04: An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0. A high-severity Stored Cross-Site Scripting (XSS) vulnerability exists in the CMS,…
- CVE-2025-22385 - CVSS 5.9 (medium), 2025-01-04: An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email…
- CVE-2025-22390 - CVSS 7.5 (high), 2025-01-04: An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS due to insufficient enforcement of…
- CVE-2025-22387 - CVSS 7.5 (high), 2025-01-04: An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is…
- CVE-2025-22389 - CVSS 8 (high), 2025-01-04: An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the application does not…
- CVE-2025-22383 - CVSS 4.6 (medium), 2025-01-04: An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity input validation issue exists in the Commerce B2B application,…
- CVE-2025-22384 - CVSS 7.5 (high), 2025-01-04: An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business logic exists in the Commerce B2B…
- CVE-2024-56175 - CVSS 6.1 (medium), 2024-12-18: In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions:…
- CVE-2024-56174 - CVSS 8.1 (high), 2024-12-18: In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions:…
- CVE-2024-56173 - CVSS 4.7 (medium), 2024-12-18: In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions:…
- CVE-2023-31754 - CVSS 4.8 (medium), 2023-11-14: Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Admin panel.
