Enonic

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Enonic records in CISA KEV

No Enonic vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Xp · all components

TI-2024-15697 CVE-2024-23679 · GHSA-4m5p-5w5w-3jcf

MEDIUM 50

Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2024-01-19 Fixed in 7.7.4 CWE-384