Vulnerabilities

TI-2007-03152 CVE-2007-3256 · GHSA-xwm7-qf33-7c64

Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile…

LOW 22

Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might f…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01367 Published 2007-06-27 No fix listed

TI-2007-03151 CVE-2007-3255 · GHSA-w6wh-wcvg-h33m

Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document…

LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to execute commands as arbitrary users vi…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0194 Published 2007-06-27 No fix listed

TI-2007-03150 CVE-2007-3254 · GHSA-p2rp-pqrc-rw7g

Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager…

LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to inject arbitrary web script or HTML via (1) a…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01774 Published 2007-06-27 No fix listed

Vulnerabilities

Filters

Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile…

Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document…

Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager…