Acquia Dam — known CVE vulnerabilities

Every CVE whose affected-product data names Acquia Dam, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-9954 — CVSS 7.5 (high): Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5.
• CVE-2024-13261 — CVSS 3.5 (low): Cross-Site Request Forgery (CSRF) vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from…