Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
xythos enterprise document manager vulnerabilities and exploits
(subscribe to this query)
3.5
CVSSv2
CVE-2007-3254
Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager (XEDM) prior to 5.0.25.8, and 6.x prior to 6.0.46.1, allow remote authenticated users to inject arbitrary web script or HTML via (1) a saved Workflow name; (2) a Workflow name, related to de...
Xythos Enterprise Document Manager 5.0
Xythos Enterprise Document Manager 6.0
4
CVSSv2
CVE-2007-3256
Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server prior to 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might facilitate malware distribution.
Xythos Digital Locker
Xythos Enterprise Document Manager
Xythos Webfile Server
6.5
CVSSv2
CVE-2007-3255
Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) prior to 5.0.25.8, and 6.x prior to 6.0.46.1, allow remote authenticated users to execute commands as arbitrary users via (1) a saved Workflow name or (2) the Content-Type HTTP...
Xythos Enterprise Document Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
hard-coded
CVE-2024-27202
NULL pointer dereference
CVE-2024-28075
CVE-2024-33608
CVE-2024-28889
CVE-2024-34572
template injection
CVE-2024-34351
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started