EK
Vendor
Ektron
12
CVEs
0
On KEV
0
New 30D
Products
EC9.8
Ektron Content Management System
Ektron
9 CVEs0 on KEV0 new
CM–
Cms4000.net
Ektron
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2012-5358 | EC Ektron Content Management System Ektron | 9.8 | Oct 30 | The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to true, which allows remote… |
| CVE-2012-5357 | EC Ektron Content Management System Ektron | 9.8 | Oct 30 | Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code… |
| CVE-2016-6133 | EC Ektron Content Management System Ektron | 6.1 | Jul 25 | Cross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3(9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or HTML… |
| CVE-2016-6201 | EC Ektron Content Management System Ektron | 6.1 | Jul 3 | Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or… |
| CVE-2015-4427 | EC Ektron Content Management System Ektron | – | Jun 9 | Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.114) allow remote… |
| CVE-2015-3624 | EC Ektron Content Management System Ektron | – | Jun 9 | Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build… |
| CVE-2015-0931 | EC Ektron Content Management System Ektron | – | Feb 14 | Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to execute arbitrary code via a… |
| CVE-2015-0923 | EC Ektron Content Management System Ektron | – | Feb 14 | The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read… |
| CVE-2014-2729 | EC Ektron Content Management System Ektron | – | Apr 25 | Cross-site scripting (XSS) vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the… |
| CVE-2009-4473 | CM Cms4000.net Ektron | – | Dec 30 | Multiple cross-site scripting (XSS) vulnerabilities in WorkArea/ContentDesigner/ekformsiframe.aspx in Ektron CMS400.NET 7.6.1.53 and 7.6.6.47, and possibly 7.52 through 7.66sp2,… |
| CVE-2008-5122 | CM Cms4000.net Ektron | – | Nov 18 | SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the res… |
| CVE-2008-3499 | CM Cms4000.net Ektron | – | Aug 6 | Unspecified vulnerability in "a page in the workarea folder" in Ektron CMS400.NET 7.00 through 7.04 and 7.50 through 7.52 has unknown impact and attack vectors |