Vulnerabilities

TI-2019-09921 CVE-2019-13237 · GHSA-36hf-6hp2-9g4c

In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local…

LOW 30

In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearhistory.jsp, convertxml.jsp, group_new.jsp, loginmessage.jsp,…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.07346 Published 2019-08-27 Fixed in 11.0.1 CWE-22

TI-2019-09919 CVE-2019-13235 · GHSA-2p6p-v69p-9mm9

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

LOW 33

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02904 Published 2019-08-27 Fixed in 11.0.1 CWE-79

TI-2019-09918 CVE-2019-13234 · GHSA-fxp8-7h5w-h235

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.

LOW 33

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02904 Published 2019-08-27 Fixed in 11.0.1 CWE-79

Vulnerabilities

Filters

In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local…

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.