Siteservercms Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Siteservercms Project records in CISA KEV

No Siteservercms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Siteservercms · all components

TI-2022-16603 CVE-2022-36226 · GHSA-3fc3-xgjx-f77w

LOW 34

SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01118 Published 2022-08-25 No fix listed CWE-862