Magnolia

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Magnolia records in CISA KEV

No Magnolia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ce 1 record LOW Content Management Suite 1 record LOW Site Designer 1 record LOW

Records

3 records

TI-2008-00669 CVE-2008-0701 · GHSA-732p-4r7p-jxmm

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during…

LOW 25

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitr…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01186 Published 2008-02-12 No fix listed CWE-264

TI-2005-04104 CVE-2005-4361 · GHSA-34x5-g49j-7c65

Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management…

LOW 24

Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01739 Published 2005-12-20 No fix listed

TI-2008-01876 CVE-2008-1953 · GHSA-p33g-rrvf-2fpx

Cross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template…

LOW 22

Cross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2008-04-25 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0