Login Request a demo
AL
Vendor
Alfresco
8 products with CVEs on record
24
CVEs
0
On KEV
1
New 30D
Products
AC
Activiti
Alfresco
6.3
2 CVEs0 on KEV1 new
AL
Alfresco
Alfresco
9.8
13 CVEs0 on KEV0 new
AC
Alfresco Content Services
Alfresco
8.8
3 CVEs0 on KEV0 new
RP
Reset Password
Alfresco
9.8
2 CVEs0 on KEV0 new
AT
Alfresco Transform Services
Alfresco
5.3
1 CVEs0 on KEV0 new
CE
Community Edition
Alfresco
–
1 CVEs0 on KEV0 new
CS
Community Share
Alfresco
5.4
1 CVEs0 on KEV0 new
SH
Share
Alfresco
5.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116058
New
AC
Activiti
Alfresco
6.3
0%
Oct 25Alfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection
CVE-2026-3967
AC
Activiti
Alfresco
6.3
0%
Mar 12Alfresco Activiti Process Variable Serialization System SerializableType.java createObjectInputStream deserialization
CVE-2024-29309
AC
Alfresco Content Services
Alfresco
7.7
1%
May 2An issue in Alfresco Content Services v.23.3.0.7 allows a remote attacker to execute arbitrary code via the Transfer Service
CVE-2020-18327
AL
Alfresco
Alfresco
6.1
1%
Mar 4Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API
CVE-2021-41792
AC
Alfresco Content Services
Alfresco
5.3
1%
Oct 21An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services through 1.3
CVE-2021-41791
CS
Community Share
Alfresco
5.4
1%
Oct 21An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0
CVE-2021-41790
AC
Alfresco Content Services
Alfresco
8.8
1%
Oct 21An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2
CVE-2020-15181
RP
Reset Password
Alfresco
9.8
1%
Sep 18The Alfresco Reset Password add-on before version 1.2.0 relies on untrusted inputs in a security decision
CVE-2020-25728
RP
Reset Password
Alfresco
8.8
1%
Sep 17The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malicious user to change any user's account password include the…
CVE-2020-8778
AL
Alfresco
Alfresco
5.4
3%
Mar 2Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project
CVE-2020-8777
AL
Alfresco
Alfresco
5.4
3%
Mar 2Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document
CVE-2020-8776
AL
Alfresco
Alfresco
5.4
3%
Mar 2Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file
CVE-2019-19496
AL
Alfresco
Alfresco
5.4
1%
Dec 2Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document
CVE-2019-14223
AL
Alfresco
Alfresco
6.1
4%
Sep 6An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N
CVE-2019-14224
AL
Alfresco
Alfresco
7.2
5%
Sep 5An issue was discovered in Alfresco Community Edition 5.2 201707
CVE-2019-14222
AL
Alfresco
Alfresco
9.8
3%
Sep 5An issue was discovered in Alfresco Community Edition versions 6.0 and lower
CVE-2019-15566
AL
Alfresco
Alfresco
9.8
2%
Aug 26The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider.java
CVE-2015-3366
AL
Alfresco
Alfresco
–
1%
Apr 21Cross-site request forgery (CSRF) vulnerability in the Alfresco module before 6.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users for…
CVE-2014-9302
CE
Community Edition
Alfresco
–
2%
Dec 7Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition 5.0.a and earlier…
CVE-2014-9301
AL
Alfresco
Alfresco
–
4%
Dec 7Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet…
CVE-2014-9300
AL
Alfresco
Alfresco
–
1%
Dec 7Cross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition before 5.0.a allows…
CVE-2014-2939
AL
Alfresco
Alfresco
–
1%
Jun 2Multiple cross-site scripting (XSS) vulnerabilities in Alfresco Enterprise before 4.1.6.13 allow remote attackers to inject arbitrary web script or HTML via (1) an XHTML document,…