Vulnerabilities

TI-2017-13003 CVE-2017-17762 · GHSA-qvv4-58rx-f26c

XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote…

MEDIUM 40

XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04648 Published 2018-08-29 No fix listed CWE-611

TI-2012-00946 CVE-2012-1032 · GHSA-49pj-5fpc-q7mf

Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before…

LOW 22

Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for EPiServer allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2014-09-17 No fix listed CWE-79

Vulnerabilities

Filters

XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote…

Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before…