Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Mayan EDMS Component: Mayan Edms Clear all filters
TI-2025-13414 CVE-2025-14692 · GHSA-x37w-7p52-8f49

Mayan EDMS authentication redirect

Priority MEDIUM 57

A flaw has been found in Mayan EDMS up to 4.10.1.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0046 Published 2025-12-14 Fixed in 4.10.2, 4.9.7 +3 CWE-601
TI-2025-13413 CVE-2025-14691 · GHSA-774q-r975-vqwp

Mayan EDMS authentication cross site scripting

Priority MEDIUM 57

A vulnerability was detected in Mayan EDMS up to 4.10.1.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00455 Published 2025-12-14 Fixed in 4.10.2, 4.9.7 +3 CWE-79
TI-2022-23496 CVE-2022-47419 · GHSA-5m6v-2xgf-qhrw

Mayan EDMS Tag XSS

Priority MEDIUM 58

An XSS vulnerability was discovered in the Mayan EDMS DMS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00536 Published 2023-02-07 Fixed in 4.3.6 CWE-79
TI-2014-03118 CVE-2014-3840 · GHSA-wpvx-26f7-65q3

Multiple cross-site scripting (XSS) vulnerabilities in…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a (1) tag or the (2) t…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.03492 Published 2014-05-27 No fix listed CWE-79