Knowledgetree Document Management

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Knowledgetree Document Management records in CISA KEV

No Knowledgetree Document Management vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Knowledgetree Document Management 3 records MEDIUM

Records

3 records

TI-2007-02756 CVE-2007-2849 · GHSA-4v5r-3fh9-hjh3

KnowledgeTree Document Management (aka KnowledgeTree Open Source) before STABLE 3.3.7…

MEDIUM 48

KnowledgeTree Document Management (aka KnowledgeTree Open Source) before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log o…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02708 Published 2007-05-24 No fix listed

TI-2008-05553 CVE-2008-5857 · GHSA-977g-hq7q-h982

The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users…

LOW 31

The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01142 Published 2009-01-06 No fix listed

TI-2008-05554 CVE-2008-5858 · GHSA-p326-q79p-m5xg

Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01034 Published 2009-01-06 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0