Read the docs

Jahia

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Jahia records in CISA KEV

No Jahia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jahia Xcm 3 records LOW

Records

3 records

TI-2013-04055 CVE-2013-4617 · GHSA-f69c-4m9v-qcv6

Jahia xCM before 6.6.2 does not include the HTTPOnly flag in a Set-Cookie header for the…

Priority LOW 25

Jahia xCM before 6.6.2 does not include the HTTPOnly flag in a Set-Cookie header for the JSESSIONID cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01257 Published 2013-11-27 No fix listed CWE-200
TI-2013-04061 CVE-2013-4624 · GHSA-4hpm-cq3x-w246

Multiple cross-site scripting (XSS) vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7 allow remote attackers to inject arbitrary web script or HTML via (1) the site parameter to engines/manager.jsp, (2) the searchStri…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01343 Published 2013-11-27 No fix listed CWE-79
Open these records in search →