Openedit

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Openedit records in CISA KEV

No Openedit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openedit Digital Asset Management 3 records LOW

Records

3 records in Openedit Digital Asset Management · all components

TI-2008-05932 CVE-2008-6239 · GHSA-8pgv-c8p6-4q99

Cross-site request forgery (CSRF) vulnerability in OpenEdit Digital Asset Management…

LOW 31

Cross-site request forgery (CSRF) vulnerability in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to perform unspecified actions as arbitrary users via unknown vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00581 Published 2009-02-23 No fix listed CWE-352

TI-2008-05933 CVE-2008-6240 · GHSA-m74q-j8cq-gc39

Cross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital…

LOW 22

Cross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2009-02-23 No fix listed CWE-79

TI-2008-05931 CVE-2008-6238 · GHSA-xh7c-ffw5-w4vj

Cross-site scripting (XSS) vulnerability in archive/savedqueries/savequeryfinish.html in…

LOW 22

Cross-site scripting (XSS) vulnerability in archive/savedqueries/savequeryfinish.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the name p…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2009-02-23 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0