Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Sitecore Component: Crm Clear all filters
TI-2017-03880 CVE-2017-5965 · GHSA-889m-9374-3cr2

The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated…

Priority LOW 32

The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shel…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.01047 Published 2017-05-23 No fix listed