İçeriğe atla
Noroxi

Alfresco kayıtları

alfresco üreticisine ait 20 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

20 kayıt
  • CVE-2019-14222
    40Planlayın

    An issue was discovered in Alfresco Community Edition versions 6.0 and lower.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    alfresco · alfresco5 Eyl 2019

  • CVE-2019-15566
    39İzleyin

    The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider.java.

    KritikCVSS 9,8İstismar yokEPSS %1

    alfresco · alfresco26 Ağu 2019

  • CVE-2020-15181
    39İzleyin

    Admin account takeover in Alfresco Reset Password

    KritikCVSS 9,8İstismar yokEPSS %1

    alfresco · reset password18 Eyl 2020

  • CVE-2021-41790
    35İzleyin

    An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2.

    YüksekCVSS 8,8İstismar yokEPSS %1

    alfresco · alfresco content services21 Eki 2021

  • CVE-2020-25728
    35İzleyin

    The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malicious user to change a

    YüksekCVSS 8,8İstismar yokEPSS %1

    alfresco · reset password17 Eyl 2020

  • CVE-2019-14224
    30İzleyin

    An issue was discovered in Alfresco Community Edition 5.2 201707.

    YüksekCVSS 7,2Kavram kanıtıEPSS %5

    alfresco · alfresco5 Eyl 2019

  • CVE-2024-29309
    30İzleyin

    An issue in Alfresco Content Services v.23.3.0.7 allows a remote attacker to execute arbitrary code via the Transfer Service.

    YüksekCVSS 7,7İstismar yokEPSS %0

    2 May 2024

  • CVE-2014-9300
    27İzleyin

    Cross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco

    OrtaCVSS 6,8İstismar yokEPSS %0

    alfresco · alfresco7 Ara 2014

  • CVE-2014-9301
    26İzleyin

    Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to

    OrtaCVSS 6,4Kavram kanıtıEPSS %3

    alfresco · alfresco7 Ara 2014

  • CVE-2019-14223
    25İzleyin

    An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N.

    OrtaCVSS 6,1Kavram kanıtıEPSS %4

    alfresco · alfresco6 Eyl 2019

  • CVE-2020-18327
    24İzleyin

    Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/adm

    OrtaCVSS 6,1İstismar yokEPSS %0

    alfresco · alfresco4 Mar 2022

  • CVE-2015-3366
    23İzleyin

    Cross-site request forgery (CSRF) vulnerability in the Alfresco module before 6.x-1.3 for Drupal allows remote attackers to hijack the authe

    OrtaCVSS 5,8İstismar yokEPSS %0

    alfresco · alfresco21 Nis 2015

  • CVE-2020-8777
    22İzleyin

    Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a

    OrtaCVSS 5,4Kavram kanıtıEPSS %3

    alfresco · alfresco2 Mar 2020

  • CVE-2020-8776
    22İzleyin

    Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.

    OrtaCVSS 5,4Kavram kanıtıEPSS %2

    alfresco · alfresco2 Mar 2020

  • CVE-2020-8778
    22İzleyin

    Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker ha

    OrtaCVSS 5,4Kavram kanıtıEPSS %2

    alfresco · alfresco2 Mar 2020

  • CVE-2014-9302
    21İzleyin

    Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresc

    OrtaCVSS 5,0Kavram kanıtıEPSS %2

    alfresco · community edition7 Ara 2014

  • CVE-2021-41792
    21İzleyin

    An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services throu

    OrtaCVSS 5,3İstismar yokEPSS %0

    alfresco · alfresco content services21 Eki 2021

  • CVE-2019-19496
    21İzleyin

    Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document.

    OrtaCVSS 5,4İstismar yokEPSS %0

    alfresco · alfresco2 Ara 2019

  • CVE-2021-41791
    21İzleyin

    An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0.

    OrtaCVSS 5,4İstismar yokEPSS %0

    alfresco · community share21 Eki 2021

  • CVE-2014-2939
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Alfresco Enterprise before 4.1.6.13 allow remote attackers to inject arbitrary web sc

    OrtaCVSS 4,3İstismar yokEPSS %1

    alfresco · alfresco2 Haz 2014