Read the docs

Blueriver

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Blueriver records in CISA KEV

No Blueriver vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sava Cms 3 records LOW Muracms 2 records LOW Mura Cms 1 record LOW

Records

2 records in Muracms · all components

TI-2018-05396 CVE-2018-7486 · GHSA-pcgv-6rcf-4897

Blue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and…

Priority LOW 36

Blue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and [/m] end tag, without proper restrictions on file types or pathnames, which allows remote attackers to execute arbitrary code via an…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02466 Published 2018-02-26 No fix listed CWE-22
TI-2017-05868 CVE-2017-8302 · GHSA-4m59-jfjc-jrjf

Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks, related to…

Priority LOW 26

Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks, related to admin/core/views/carch/list.cfm, admin/core/views/carch/loadsiteflat.cfm, admin/core/views/cusers/inc/dsp_nextn.cfm, admin/core/views/cusers/inc/dsp_sea…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00676 Published 2017-04-27 No fix listed CWE-79
Open these records in search →