EC
Product
Ektron Content Management System
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 2Low 0
Watch
Add Ektron Content Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-5358 | 9.8 | Oct 30 | The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to true, which allows remote… Affected: through 8.02 |
| CVE-2012-5357 | 9.8 | Oct 30 | Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code… Affected: through 8.02 |
| CVE-2016-6133 | 6.1 | Jul 25 | Cross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3(9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or HTML… Affected: through 9.10 |
| CVE-2016-6201 | 6.1 | Jul 3 | Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or… Affected: through 9.10 |
| CVE-2015-4427 | – | Jun 9 | Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.114) allow remote… Affected: through 9.1 |
| CVE-2015-3624 | – | Jun 9 | Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build… Affected: through 9.1 |
| CVE-2015-0931 | – | Feb 14 | Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to execute arbitrary code via a… Affected: 8.5.0; 8.7.0; 8.7.0; 8.9.0 |
| CVE-2015-0923 | – | Feb 14 | The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read… Affected: 8.5.0; 8.7.0; 8.7.0; 8.9.0 |
| CVE-2014-2729 | – | Apr 25 | Cross-site scripting (XSS) vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the… Affected: 8.7.0 |
Showing 9