Read the docs

Mayan EDMS

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Mayan EDMS records in CISA KEV

No Mayan EDMS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mayan Edms 7 records MEDIUM

Records

7 records

TI-2022-23496 CVE-2022-47419 · GHSA-5m6v-2xgf-qhrw

Mayan EDMS Tag XSS

Priority MEDIUM 58

An XSS vulnerability was discovered in the Mayan EDMS DMS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00536 Published 2023-02-07 Fixed in 4.3.6 CWE-79
TI-2025-13414 CVE-2025-14692 · GHSA-x37w-7p52-8f49

Mayan EDMS authentication redirect

Priority MEDIUM 57

A flaw has been found in Mayan EDMS up to 4.10.1.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0046 Published 2025-12-14 Fixed in 4.10.2, 4.9.7 +3 CWE-601
TI-2025-13413 CVE-2025-14691 · GHSA-774q-r975-vqwp

Mayan EDMS authentication cross site scripting

Priority MEDIUM 57

A vulnerability was detected in Mayan EDMS up to 4.10.1.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00455 Published 2025-12-14 Fixed in 4.10.2, 4.9.7 +3 CWE-79
TI-2014-03118 CVE-2014-3840 · GHSA-wpvx-26f7-65q3

Multiple cross-site scripting (XSS) vulnerabilities in…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a (1) tag or the (2) t…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.03492 Published 2014-05-27 No fix listed CWE-79
Open these records in search →