Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Ulicms

First CVE: May 8, 2019Active for: 7 yearsTotal CVEs: 7

Ulicms is a content management system with a narrow product scope that punches above its typical representation in vulnerability disclosures, suggesting it remains deployed in a material number of web properties despite limited market visibility. The vendor's vulnerabilities skew strongly toward critical-severity outcomes and frequently acquire public exploit code; the recurring exposure centers on its web-facing CMS platform through weakness classes including cross-site scripting, authorization bypass, missing authorization checks, and unrestricted file uploads that are characteristic of application-layer access and input-handling flaws. Defenders managing Ulicms instances should prioritize updates and restrict administrative access; live severity and exploitation counts are shown alongside this summary.

FAUCET AI Generated
7
Total CVEs
More Total CVEs than 88% of tracked vendors
2.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 90% of tracked vendors
7.5
Avg CVSS Score
Higher Avg CVSS Score than 72% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Ulicms over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 8, 2019
7 years ago
Most Recent CVE
Dec 17, 2025
219 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (7 CVEs).

7 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-53923CRITICAL
UliCMS 2023.1 contains a privilege escalation vulnerability that allows unauthenticated attackers to create administrative accounts through the UserController endpoint. Attackers c
Dec 17, 20259.834NONO
CVE-2023-53914CRITICAL
UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through mass assignment in the UserController. Attackers c
Dec 17, 20259.834NONO
CVE-2019-11398MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitrary web script or HTML via the go parameter to admin/index.ph
May 8, 20196.131NOYES
CVE-2020-12704MEDIUM
UliCMS before 2020.2 has PageController stored XSS.
May 7, 20206.129NOYES
CVE-2023-53924HIGH
UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar extension during profile avatar uplo
Dec 17, 20258.828NONO
CVE-2023-53925MEDIUM
UliCMS 2023.1 contains a stored cross-site scripting vulnerability that allows attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG fi
Dec 17, 20256.121NONO
CVE-2020-12703MEDIUM
UliCMS before 2020.2 has XSS during PackageController uninstall.
May 7, 20206.117NONO
View all 7 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products7 CVEs
57%
14%
29%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (42.9%)
Unknown0 (0.0%)
Required4 (57.1%)
Privileges Required
Low1 (14.3%)
High0 (0.0%)
None6 (85.7%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (7 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
28.6% of CVEs· 79th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Ulicms.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Ulicms — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Ulicms's Products

View all 2 CNAs →

Top CWEs