Episerver

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Episerver records in CISA KEV

No Episerver vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Episerver 2 records MEDIUM Episerver Cms 2 records LOW Ektron Cms 1 record MEDIUM Find 1 record LOW

Records

2 records in Episerver · all components

TI-2017-13003 CVE-2017-17762 · GHSA-qvv4-58rx-f26c

XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote…

MEDIUM 40

XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04648 Published 2018-08-29 No fix listed CWE-611

TI-2012-00946 CVE-2012-1032 · GHSA-49pj-5fpc-q7mf

Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before…

LOW 22

Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for EPiServer allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2014-09-17 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	4
Low	0
No CVSS	0