The most visible service of a CoreMedia CMS installation are the delivery CAEs.

Validate request URLs and request parameters. Make sure a properly styled, but terse error page is in place to avoid giving hints about the cause of malfunctions. Make sure to escape text data properly to avoid cross-site scripting attacks.