Ektron

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Ektron records in CISA KEV

No Ektron vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ektron Content Management System 9 records HIGH Cms4000.net 3 records MEDIUM

Records

3 records in Cms4000.net · all components

TI-2008-03351 CVE-2008-3499 · GHSA-hx72-hww2-3246

Unspecified vulnerability in "a page in the workarea folder" in Ektron CMS400.NET 7.00…

MEDIUM 46

Unspecified vulnerability in "a page in the workarea folder" in Ektron CMS400.NET 7.00 through 7.04 and 7.50 through 7.52 has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01446 Published 2008-08-06 No fix listed

TI-2008-04873 CVE-2008-5122 · GHSA-9x54-w9pf-vm7w

SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET…

LOW 35

SQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the res parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01137 Published 2008-11-18 No fix listed CWE-89

TI-2009-04236 CVE-2009-4473 · GHSA-cfpf-233f-2c4q

Multiple cross-site scripting (XSS) vulnerabilities in…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in WorkArea/ContentDesigner/ekformsiframe.aspx in Ektron CMS400.NET 7.6.1.53 and 7.6.6.47, and possibly 7.52 through 7.66sp2, allow remote attackers to inject arbitrary…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2009-12-30 No fix listed CWE-79

Open these records in search →

Critical	3
High	1
Medium	6
Low	2
No CVSS	0