Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

appRain CMF — Vulnerabilities & Security Advisories 33

All 33 CVE vulnerabilities found in appRain CMF, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive vulnerability aggregation summary for appRain CMF, focusing on common weakness types and associated security tags within the vendor’s ecosystem. The content here consolidates reports from various security advisories, tracking discovered flaws that range from remote code execution and SQL injection to cross-site scripting and authentication bypasses. We have gathered data spanning several years, covering the period from initial public disclosures through the most recent patch releases, ensuring a longitudinal view of the product's security posture over time. By examining this aggregated data, researchers and administrators can effectively track the vendor’s historical response to specific advisories and analyze patterns in how different weakness classes have been exploited or mitigated. This resource allows users to understand the evolution of a particular weakness class across different versions of the software, providing context that isolated CVE entries often lack. Furthermore, it enables a deep dive into the complete vulnerability history of appRain CMF, helping stakeholders assess the overall risk landscape and prioritize remediation efforts based on the frequency and severity of past issues. The structured presentation facilitates quick identification of recurring themes in the codebase, supporting informed decision-making for security audits and compliance reviews without relying on fragmented or incomplete information sources.

Vendor: appRain

CVE IDTitleCVSSSeverityPublished
CVE-2024-58279 appRain CMF 4.0.5 Authenticated Remote Code Execution via Filemanager Upload CWE-434 7.2AIHighAI2025-12-10
CVE-2025-41063 Reflected Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41062 Reflected Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41061 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41060 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41059 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41058 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41057 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41056 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41055 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41054 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41053 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41052 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41051 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41050 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41049 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41048 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41047 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41046 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41045 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41044 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41043 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41042 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41041 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41040 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41039 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41038 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41037 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41036 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 -2025-09-04
CVE-2025-41035 Path Traversal vulnerability in appRain CMF CWE-22 6.5 -2025-09-04

All 33 known CVE vulnerabilities affecting appRain CMF with full Chinese analysis, references, and POCs where available.