Product by CERN

    CERN Indico

    11 known vulnerabilities in CERN Indico (CERN), 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in CERN Indico (CERN)
    HighCVE-2026-33046

    Indico discloses local files resulting in Remote Code Execution through LaTeX injection

    also in 1 other product

    		8.8
    HighCVE-2021-30185

    CERN Indico: security vulnerability

    		7.5
    MediumCVE-2025-53640

    Indico vulnerable to user enumeration via API endpoint

    also in 1 other product

    		6.5
    MediumCVE-2026-25738

    Indico has Server-Side Request Forgery (SSRF) in multiple places

    also in 1 other product

    		4.3
    MediumCVE-2026-28352

    Indico missing access check in event series management API

    also in 1 other product

    		6.5
    MediumCVE-2023-37901

    Cross-Site-Scripting via confirmation prompts

    also in 1 other product

    		5.4
    MediumCVE-2026-25739

    Indico affected by Cross-Site-Scripting via material uploads

    also in 1 other product

    		5.4
    MediumCVE-2024-45399

    Indico has a Cross-Site-Scripting during account creation

    also in 1 other product

    		4.3
    MediumCVE-2025-59034

    Indico may disclose unauthorized user details access via legacy API

    also in 1 other product

    		4.3
    MediumCVE-2025-59035

    Indico vulnerable to Cross-Site Scripting via LaTeX math code

    also in 1 other product

    		4.6
    HighCVE-2024-50633

    CERN Indico: Insertion of Sensitive Information Into Sent Data

    		—

    All products by CERN