Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hyland vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2021-32828
The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the `oauth2` REST API is vulnerable to Reflected Cross-Site Scripting (XSS). This XSS can be escalated to Remote Code Execution (RCE) by levering the automati...
Hyland Nuxeo
6.4
CVSSv2
CVE-2020-25256
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. PKI certificates have a private key that is the same across different customers' installations.
Hyland Onbase
7.5
CVSSv2
CVE-2020-25257
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows XXE attacks for read/write access to arbitrary files.
Hyland Onbase
7.5
CVSSv2
CVE-2020-25259
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It uses XML deserialization libraries in an unsafe manner.
Hyland Onbase
7.5
CVSSv2
CVE-2020-25260
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows remote malicious users to execute arbitrary code because of unsafe JSON deserialization.
Hyland Onbase
6.8
CVSSv2
CVE-2020-25252
An issue exists in Hyland OnBase up to and including 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. CSRF can be used to log in a user, and then perform actions, because there are default credentials (the wstinol ...
Hyland Onbase
5
CVSSv2
CVE-2020-25255
An issue exists in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows remote malicious users to cause a denial of service (outage of connection-request processing) via a long user ID, which tr...
Hyland Onbase
5
CVSSv2
CVE-2018-19629
A Denial of Service vulnerability in the ImageNow Server service in Hyland Perceptive Content Server prior to 7.1.5 allows an malicious user to crash the service via a TCP connection.
Hyland Perceptive Content Server
NA
CVE-2023-49964
An issue exists in Hyland Alfresco Community Edition up to and including 7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may perform SSTI (Server-Side Template Injection) attacks, which can leverage FreeMarker exposed objects to bypass restricti...
Hyland Alfresco Content Services
1 Github repository
5
CVSSv2
CVE-2018-6293
Arbitrary File Read in Saperion Web Client version 7.5.2 83166.
Hyland Saperion Web Client 7.5.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
cross-site request forgery
unauthorized
CVE-2024-33925
reflected XSS
CVE-2023-51580
CVE-2023-51579
CVE-2015-2051
CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »