Entando

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Entando records in CISA KEV

No Entando vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Admin Console 1 record LOW

Records

1 record in Admin Console · all components

TI-2021-14204 CVE-2021-35450 · GHSA-pv5c-5q27-f5cp

A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a…

LOW 36

A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with privileges to execute FreeMarker template with command execution via freemarker.template.utility.Execute

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02381 Published 2021-08-02 No fix listed CWE-74

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0