episerver kayıtları
episerver üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-269 Improper Privilege Management1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-611 Improper Restriction of XML External Entity Reference1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
46Planlayın | CVE-2018-12596Kavram kanıtı | Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspxepiserver · ektron cms · CWE-269 | Kritik9,8 | — | %22,4 | 10 Eki 2018 |
31İzleyin | CVE-2017-17762Kavram kanıtı | XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTDepiserver · episerver · CWE-611 | Yüksek7,5 | — | %4,6 | 29 Ağu 2018 |
25İzleyin | CVE-2020-24550Kavram kanıtı | An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the _t_redirecepiserver · find · CWE-601 | Orta6,1 | — | %4,7 | 31 Mar 2021 |
24İzleyin | CVE-2012-1031İstismar yok | Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authentiepiserver · episerver cms | Orta6,0 | — | %1,0 | 8 Şub 2012 |
17İzleyin | CVE-2012-1032İstismar yok | Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for EPiServer allows remote attackers to inject siteseeker · euroling siteseeker · CWE-79 | Orta4,3 | — | %1,2 | 17 Eyl 2014 |
17İzleyin | CVE-2012-1034İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote attackers to inject arbepiserver · episerver cms · CWE-79 | Orta4,3 | — | %1,1 | 8 Şub 2012 |
- CVE-2018-1259646Planlayın
Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx
KritikCVSS 9,8Kavram kanıtıEPSS %22episerver · ektron cms10 Eki 2018
- CVE-2017-1776231İzleyin
XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD
YüksekCVSS 7,5Kavram kanıtıEPSS %5episerver · episerver29 Ağu 2018
- CVE-2020-2455025İzleyin
An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the _t_redirec
OrtaCVSS 6,1Kavram kanıtıEPSS %5episerver · find31 Mar 2021
- CVE-2012-103124İzleyin
Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenti
OrtaCVSS 6,0İstismar yokEPSS %1episerver · episerver cms8 Şub 2012
- CVE-2012-103217İzleyin
Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for EPiServer allows remote attackers to inject
OrtaCVSS 4,3İstismar yokEPSS %1siteseeker · euroling siteseeker17 Eyl 2014
- CVE-2012-103417İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote attackers to inject arb
OrtaCVSS 4,3İstismar yokEPSS %1episerver · episerver cms8 Şub 2012