Lumis

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Lumis records in CISA KEV

No Lumis vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Lumis Experience Platform · all components

TI-2021-09263 CVE-2021-27931 · GHSA-2rf2-p79x-79wj

MEDIUM 57

LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.18132 Published 2021-03-03 No fix listed CWE-611