Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Jahia Clear all filters
TI-2013-04061 CVE-2013-4624 · GHSA-4hpm-cq3x-w246

Multiple cross-site scripting (XSS) vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7 allow remote attackers to inject arbitrary web script or HTML via (1) the site parameter to engines/manager.jsp, (2) the searchStri…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01343 Published 2013-11-27 No fix listed CWE-79
TI-2013-04055 CVE-2013-4617 · GHSA-f69c-4m9v-qcv6

Jahia xCM before 6.6.2 does not include the HTTPOnly flag in a Set-Cookie header for the…

Priority LOW 25

Jahia xCM before 6.6.2 does not include the HTTPOnly flag in a Set-Cookie header for the JSESSIONID cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01257 Published 2013-11-27 No fix listed CWE-200