Known vulnerabilities in Alfresco Community
Vendor:
Alfresco Software, Inc
Software:
Alfresco Community
Software CPE:
cpe:2.3:a:alfresco_software:alfresco_community:*:*:*:*:*:*:*:*
Website:
https://www.alfresco.com/
Total vulnerabilities:
5
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU85037 - Improper Control of Generation of Code ('Code Injection') CVE-2023-49964 |
CWE-94 | High | - | 05.01.2024 |
SB2024010536 |
||
| #VU61054 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-18327 |
CWE-79 | Low | 6.2.0 | 07.03.2022 |
SB2022030714 |
||
| #VU25746 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-8778 |
CWE-79 | Low | 6.2.0 | 03.03.2020 |
SB2020030308 |
||
| #VU25745 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-8777 |
CWE-79 | Low | 6.2.0 | 03.03.2020 |
SB2020030308 |
||
| #VU25744 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-8776 |
CWE-79 | Low | 6.2.0 | 03.03.2020 |
SB2020030308 |