Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Hyland Component: Alfresco Content Services Clear all filters
TI-2026-21292 CVE-2026-26336 · GHSA-j59q-24q8-ggc7

Hyland Alfresco Improper Authorization Arbitrary File Read

Priority MEDIUM 44

Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, thus leading to the disclosure of sensitive configuration files…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00457 Published 2026-02-19 Fixed in 7.4.2.6, 23.6.1 +1 CWE-863
TI-2024-26898 CVE-2024-40347 · GHSA-f437-v3vf-3c5h

A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform…

Priority MEDIUM 60

A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00403 Published 2024-07-20 No fix listed CWE-79