Vendor

    CERN

    22 known vulnerabilities in products by CERN, 0 of them actively exploited (CISA KEV).

    Key figures

    22

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in CERN
    HighCVE-2017-1000203

    CERN Root: Remote Code Execution

    		8.8
    HighCVE-2026-33046

    Indico discloses local files resulting in Remote Code Execution through LaTeX injection

    also in 1 other product

    		8.8
    CriticalCVE-2023-22577

    White Rabbit Switch - Password Disclosure Vulnerability

    		9.8
    CriticalCVE-2023-22581

    White Rabbit Switch - Unauthenticated remote code execution

    		9.8
    HighCVE-2021-30185

    CERN Indico: security vulnerability

    		7.5
    CriticalCVE-2026-29080

    Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API

    also in 1 other product

    		8.8
    CriticalCVE-2026-29090

    Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database

    also in 1 other product

    		8.8
    MediumCVE-2025-53640

    Indico vulnerable to user enumeration via API endpoint

    also in 1 other product

    		6.5
    HighCVE-2026-25136

    Rucio WebUI has a Reflected Cross-site Scripting Vulnerability

    also in 1 other product

    		8.1
    HighCVE-2026-25733

    Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function

    also in 1 other product

    		7.3
    MediumCVE-2026-25738

    Indico has Server-Side Request Forgery (SSRF) in multiple places

    also in 1 other product

    		4.3
    MediumCVE-2026-28352

    Indico missing access check in event series management API

    also in 1 other product

    		6.5
    MediumCVE-2026-25736

    Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute

    also in 1 other product

    		6.1
    MediumCVE-2026-25734

    Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata

    also in 1 other product

    		6.1
    MediumCVE-2026-25735

    Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name

    also in 1 other product

    		6.1
    MediumCVE-2026-25138

    Rucio WebUI has Username Enumeration via Login Error Message

    also in 1 other product

    		5.3
    MediumCVE-2023-37901

    Cross-Site-Scripting via confirmation prompts

    also in 1 other product

    		5.4
    MediumCVE-2026-25739

    Indico affected by Cross-Site-Scripting via material uploads

    also in 1 other product

    		5.4
    MediumCVE-2024-45399

    Indico has a Cross-Site-Scripting during account creation

    also in 1 other product

    		4.3
    MediumCVE-2025-59034

    Indico may disclose unauthorized user details access via legacy API

    also in 1 other product

    		4.3
    MediumCVE-2025-59035

    Indico vulnerable to Cross-Site Scripting via LaTeX math code

    also in 1 other product

    		4.6
    HighCVE-2024-50633

    CERN Indico: Insertion of Sensitive Information Into Sent Data

    		—

    Products

    Products by CERN
    CERN Indico110
    Rucio80