Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ektron Content Management System CRITICAL 9.8
CVE-2012-5357EPSS 68%

Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attacke…

Fix: after 8.02
Fix from $2,300 2017-10-30
Ektron Content Management System CRITICAL 9.8
CVE-2012-5358

The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to tr…

Fix: after 8.02
Fix from $2,300 2017-10-30
Ektron Content Management System MEDIUM 6.1
CVE-2016-6133

Cross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3(9.1.0.184.3.127) allows remote attackers to inject a…

Fix: after 9.10
Fix from $1,600 2017-07-25
Ektron Content Management System MEDIUM 6.1
CVE-2016-6201

Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127) allows remote attackers to …

Fix: after 9.10
Fix from $1,600 2017-07-03
Ektron Content Management System MEDIUM 5.8
CVE-2015-3624

Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content Management System (CMS) befor…

Fix: after 9.1
Fix from $1,600 2015-06-09
Ektron Content Management System MEDIUM 6.8
CVE-2015-0931

Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to e…

Mitigation only
Fix from $1,600 2015-02-14
Ektron Content Management System MEDIUM 5.0
CVE-2015-0923EPSS 22%

The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 all…

Mitigation only
Fix from $1,600 2015-02-14
Cms4000.net HIGH 7.5
CVE-2008-5122

SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and earlier allows remote attackers to execute arbitrary S…

Fix: after 7.52
Fix from $1,950 2008-11-18
Cms4000.net HIGH 10.0
CVE-2008-3499

Unspecified vulnerability in "a page in the workarea folder" in Ektron CMS400.NET 7.00 through 7.04 and 7.50 through 7.52 has unknown impact and atta…

Patch available
Fix from $1,950 2008-08-06