Approved changes feed: RSS · Atom

cpe:2.3:a:sitecore:experience_platform:8.1:rev._160519:*:*:*:*:*:*

part: a version: 8.1 update: rev._160519

VendorSitecore (a7d448aa-2b42-539c-981e-05d11ea00680)
ProductExperience Platform (026326e1-f45f-5b58-94dc-146885d4fa2f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8855 vulnerable 2026-06-03 14:36:14.939460 Details available
Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 (8.1 Update-3) allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2.
Published: 2017-03-19T18:00:00.000Z
Updated: 2024-08-06T02:35:02.225Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.