Alfresco

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Alfresco records in CISA KEV

No Alfresco vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Alfresco 13 records MEDIUM Alfresco Content Services 2 records MEDIUM Reset Password 2 records MEDIUM Alfresco Transform Services 1 record LOW Community Edition 1 record LOW Community Share 1 record LOW Share 1 record LOW

Records

1 record in Community Edition · all components

TI-2014-07547 CVE-2014-9302 · GHSA-mvfq-76qv-w62r

Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content…

LOW 27

Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition 5.0.a and earlier allows remote attackers to trigger outboun…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02008 Published 2014-12-07 No fix listed

Open these records in search →

Critical	3
High	3
Medium	15
Low	0
No CVSS	0