Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
alfresco alfresco vulnerabilities and exploits
(subscribe to this query)
3.5
CVSSv2
CVE-2020-8777
Alfresco Enterprise prior to 5.2.7 and Alfresco Community prior to 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document.
Alfresco Alfresco
1 EDB exploit
3.5
CVSSv2
CVE-2020-8776
Alfresco Enterprise prior to 5.2.7 and Alfresco Community prior to 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.
Alfresco Alfresco
1 EDB exploit
3.5
CVSSv2
CVE-2020-8778
Alfresco Enterprise prior to 5.2.7 and Alfresco Community prior to 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project.
Alfresco Alfresco
1 EDB exploit
3.5
CVSSv2
CVE-2019-19496
Alfresco Enterprise prior to 5.2.5 allows stored XSS via an uploaded HTML document.
Alfresco Alfresco
5.8
CVSSv2
CVE-2019-14223
An issue exists in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website o...
Alfresco Alfresco 6.0
Alfresco Alfresco
Alfresco Alfresco 6.1
7.5
CVSSv2
CVE-2019-14222
An issue exists in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vulnerability is due to the presence of a default private key that is present in all default installations...
Alfresco Alfresco
9
CVSSv2
CVE-2019-14224
An issue exists in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an malicious user to achieve remote code execution on the victim machine. The attacker must upload maliciou...
Alfresco Alfresco 5.2
7.5
CVSSv2
CVE-2019-15566
The Alfresco application prior to 1.8.7 for Android allows SQL injection in HistorySearchProvider.java.
Alfresco Alfresco
5.8
CVSSv2
CVE-2015-3366
Cross-site request forgery (CSRF) vulnerability in the Alfresco module prior to 6.x-1.3 for Drupal allows remote malicious users to hijack the authentication of arbitrary users for requests that delete an alfresco node via unspecified vectors.
Alfresco Alfresco
6.4
CVSSv2
CVE-2014-9301
Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition prior to 5.0.a allows remote malicious users to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parame...
Alfresco Alfresco
1 EDB exploit
1 Github repository
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
bypass
open redirect
CVE-2024-4358
CVE-2024-24199
CVE-2024-5550
CVE-2024-5305
CVE-2024-30373
CVE-2024-1800
deserialization
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »