Vulnerabilities

TI-2008-05933 CVE-2008-6240 · GHSA-m74q-j8cq-gc39

Cross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital…

LOW 22

Cross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2009-02-23 No fix listed CWE-79

TI-2008-05932 CVE-2008-6239 · GHSA-8pgv-c8p6-4q99

Cross-site request forgery (CSRF) vulnerability in OpenEdit Digital Asset Management…

LOW 31

Cross-site request forgery (CSRF) vulnerability in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to perform unspecified actions as arbitrary users via unknown vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00581 Published 2009-02-23 No fix listed CWE-352

TI-2008-05931 CVE-2008-6238 · GHSA-xh7c-ffw5-w4vj

Cross-site scripting (XSS) vulnerability in archive/savedqueries/savequeryfinish.html in…