Read the docs

Hyland

Records35All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

Hyland records in CISA KEV

No Hyland vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Onbase 15 records MEDIUM Perceptive Document Filters 4 records MEDIUM Alfresco Content Services 3 records MEDIUM Alfresco Transform Core 3 records MEDIUM Alfresco Transform Service 3 records MEDIUM Pacsgear 2 records HIGH Saperion Web Client 2 records MEDIUM Nuxeo 1 record MEDIUM

Records

3 records in Alfresco Content Services · all components

TI-2024-26898 CVE-2024-40347 · GHSA-f437-v3vf-3c5h

A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform…

Priority MEDIUM 60

A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00403 Published 2024-07-20 No fix listed CWE-79
TI-2026-21292 CVE-2026-26336 · GHSA-j59q-24q8-ggc7

Hyland Alfresco Improper Authorization Arbitrary File Read

Priority MEDIUM 44

Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, thus leading to the disclosure of sensitive configuration files…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00457 Published 2026-02-19 Fixed in 7.4.2.6, 23.6.1 +1 CWE-863
Open these records in search →