OpenKM Professional Edition vulnerabilities

2 known vulnerabilities in OpenKM Professional Edition from OpenKM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  OpenKM Community Edition: Improper Control of Generation of Code

  CVE-2026-42785May 26, 2026OpenKM

  OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary Java/BeanShell code through the /admin/Scripting endpoint. Attackers can submit malicious script content with an action=Evaluate paramete

• 7.2 High severity

  OpenKM Community Edition: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-42425May 26, 2026OpenKM

  OpenKM 6.3.12 contains an unrestricted SQL execution vulnerability that allows authenticated administrative users to execute arbitrary SQL statements against the application database via the DatabaseQuery interface. Attackers can submit malicious SQL queries t