TI-2019-09919 CVE-2019-13235 · GHSA-2p6p-v69p-9mm9
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.
Priority LOW 33
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.
Alkacon
Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Alkacon records in CISA KEVNo Alkacon vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records in Opencms Apollo Template · all components
TI-2019-09918 CVE-2019-13234 · GHSA-fxp8-7h5w-h235
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.
Priority LOW 33
In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.
TI-2019-09921 CVE-2019-13237 · GHSA-36hf-6hp2-9g4c
In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local…
Priority LOW 30
In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearhistory.jsp, convertxml.jsp, group_new.jsp, loginmessage.jsp,…