Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
xythos digital locker vulnerabilities and exploits
(subscribe to this query)
4
CVSSv2
CVE-2007-3256
Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server prior to 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might facilitate malware distribution.
Xythos Digital Locker
Xythos Enterprise Document Manager
Xythos Webfile Server
3.5
CVSSv2
CVE-2007-3254
Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager (XEDM) prior to 5.0.25.8, and 6.x prior to 6.0.46.1, allow remote authenticated users to inject arbitrary web script or HTML via (1) a saved Workflow name; (2) a Workflow name, related to de...
Xythos Enterprise Document Manager 5.0
Xythos Enterprise Document Manager 6.0
6.5
CVSSv2
CVE-2007-3255
Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) prior to 5.0.25.8, and 6.x prior to 6.0.46.1, allow remote authenticated users to execute commands as arbitrary users via (1) a saved Workflow name or (2) the Content-Type HTTP...
Xythos Enterprise Document Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644
unprivileged
CVE-2024-3494
CVE-2024-22460
CVE-2024-26026
CVE-2024-23473
firewall
CVE-2024-28889
XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started