Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
alfresco vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2019-14223
An issue exists in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website o...
Alfresco Alfresco 6.0
Alfresco Alfresco
Alfresco Alfresco 6.1
8.8
CVSSv3
CVE-2021-41790
An issue exists in Hyland org.alfresco:alfresco-content-services up to and including 7.0.1.2. Script Action execution allows executing scripts uploaded outside of the Data Dictionary. This could allow a logged-in malicious user to execute arbitrary code inside a sandboxed environ...
Alfresco Alfresco Content Services 7.0.0.2
Alfresco Alfresco Content Services 7.0.0.1
Alfresco Alfresco Content Services 7.0
Alfresco Alfresco Content Services
5.3
CVSSv3
CVE-2021-41792
An issue exists in Hyland org.alfresco:alfresco-content-services up to and including 6.2.2.18 and org.alfresco:alfresco-transform-services up to and including 1.3. A crafted HTML file, once uploaded, could trigger an unexpected request by the transformation engine. The response t...
Alfresco Alfresco Content Services
Alfresco Alfresco Transform Services
5.4
CVSSv3
CVE-2021-41791
An issue exists in Hyland org.alfresco:share up to and including 7.0.0.2 and org.alfresco:community-share up to and including 7.0. An evasion of the XSS filter for HTML input validation in the Alfresco Share User Interface leads to stored XSS that could be exploited by an attacke...
Alfresco Community Share
Alfresco Share
Alfresco Share 7.0
Alfresco Share 7.0.0.1
Alfresco Share 7.0.0.2
Alfresco Share 7.0.1
5.4
CVSSv3
CVE-2020-8776
Alfresco Enterprise prior to 5.2.7 and Alfresco Community prior to 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.
Alfresco Alfresco
1 EDB exploit
5.4
CVSSv3
CVE-2020-8777
Alfresco Enterprise prior to 5.2.7 and Alfresco Community prior to 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document.
Alfresco Alfresco
1 EDB exploit
5.4
CVSSv3
CVE-2020-8778
Alfresco Enterprise prior to 5.2.7 and Alfresco Community prior to 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project.
Alfresco Alfresco
1 EDB exploit
NA
CVE-2014-2939
Multiple cross-site scripting (XSS) vulnerabilities in Alfresco Enterprise prior to 4.1.6.13 allow remote malicious users to inject arbitrary web script or HTML via (1) an XHTML document, (2) a <% tag, or (3) the taskId parameter to share/page/task-edit.
Alfresco Alfresco
NA
CVE-2014-9300
Cross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition prior to 5.0.a allows remote malicious users to hijack the authentication of users for requests that access unauthorized ...
Alfresco Alfresco
NA
CVE-2014-9301
Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition prior to 5.0.a allows remote malicious users to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parame...
Alfresco Alfresco
1 EDB exploit
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
firmware
CVE-2006-4304
CVE-2024-32878
CVE-2024-31502
XSS
CVE-2024-3059
CVE-2024-33692
CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »