Xythos

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Xythos records in CISA KEV

No Xythos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Enterprise Document Manager 3 records LOW Digital Locker 1 record LOW Webfile Server 1 record LOW

Records

3 records in Enterprise Document Manager · all components

TI-2007-03151 CVE-2007-3255 · GHSA-w6wh-wcvg-h33m

Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document…

LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to execute commands as arbitrary users vi…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0194 Published 2007-06-27 No fix listed

TI-2007-03152 CVE-2007-3256 · GHSA-xwm7-qf33-7c64

Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile…

LOW 22

Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might f…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01367 Published 2007-06-27 No fix listed

TI-2007-03150 CVE-2007-3254 · GHSA-p2rp-pqrc-rw7g

Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager…

LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to inject arbitrary web script or HTML via (1) a…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01774 Published 2007-06-27 No fix listed

Open these records in search →

Critical	0
High	0
Medium	2
Low	1
No CVSS	0