Unscored severity · published Aug 6, 2008
CVE-2008-3499
Unspecified vulnerability in "a page in the workarea folder" in Ektron CMS400.NET 7.00 through 7.04 and 7.50 through 7.52 has unknown impact and attack vectors
–
CVSS
1.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in "a page in the workarea folder" in Ektron CMS400.NET 7.00 through 7.04 and 7.50 through 7.52 has unknown impact and attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Cms4000.net · Ektron
7.00; 7.01; 7.02; 7.03; 7.04; 7.50; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3499
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3499
Patch
http://dev.ektron.com/kb_article.aspx?id=18294
Patch
http://secunia.com/advisories/30858
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/44488
More from Cms4000.net
–
CVE-2009-4473
Multiple cross-site scripting (XSS) vulnerabilities in WorkArea/ContentDesigner/ekformsiframe.aspx in Ektron CMS400.NET 7.6.1.53 and 7.6.6.47, and possibly 7.52 through 7.66sp2,…
–
CVE-2008-5122
SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the res…