Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hyland onbase vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2020-25255
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows remote malicious users to cause a denial of service (outage of connection-request processing) via a long user ID, which tr...
Hyland Onbase
7.5
CVSSv3
CVE-2020-25247
An issue exists in Hyland OnBase up to and including 18.0.0.32 and 19.x up to and including 19.8.9.1000. Directory traversal exists for writing to files, as demonstrated by the FileName parameter.
Hyland Onbase
7.5
CVSSv3
CVE-2020-25250
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Client applications can write arbitrary data to the server logs.
Hyland Onbase
9.8
CVSSv3
CVE-2020-25253
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows SQL injection, as demonstrated by the TableName, ColumnName, Name, UserId, or Password parameter.
Hyland Onbase
9.8
CVSSv3
CVE-2020-25257
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows XXE attacks for read/write access to arbitrary files.
Hyland Onbase
9.8
CVSSv3
CVE-2020-25260
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows remote malicious users to execute arbitrary code because of unsafe JSON deserialization.
Hyland Onbase
5.3
CVSSv3
CVE-2022-23342
The Hyland Onbase Application Server releases before 20.3.58.1000 and OnBase releases 21.1.1.1000 up to and including 21.1.15.1000 are vulnerable to a username enumeration vulnerability. An attacker can obtain valid users based on the response returned for invalid and valid users...
Hyland Onbase
1 Github repository
7.5
CVSSv3
CVE-2020-25248
An issue exists in Hyland OnBase up to and including 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Directory traversal exists for reading files, as demonstrated by the FileName parameter.
Hyland Onbase
5.3
CVSSv3
CVE-2020-25249
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. The server typically logs activity only when a client application specifies that logging is desired. This can be problematic for use...
Hyland Onbase
9.1
CVSSv3
CVE-2020-25251
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Client-side authentication is used for critical functions such as adding users or retrieving sensitive information.
Hyland Onbase
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »