Ektron Content Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:ektron:ektron_content_management_system:*:sp1:*:*:*:*:*:*
part: a version: * update: sp1
| Vendor | Ektron (d3cf1ce5-6b0e-5805-baea-1285fc227c81) |
|---|---|
| Product | Ektron Content Management System (8303070f-bf05-5a37-a404-4516fa6f945d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-6201 |
vulnerable | 2026-06-08 05:07:59.136954 |
Details available
Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or HTML via the ContType parameter in a ViewContentByCategory action to WorkArea/content.aspx.
Published: 2017-07-03T16:00:00.000Z
Updated: 2024-08-06T01:22:20.604Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6133 |
vulnerable | 2026-06-08 05:07:59.005453 |
Details available
Cross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3(9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or HTML via the rptStatus parameter in a Report action to WorkArea/SelectUserGroup.aspx.
Published: 2017-07-25T20:00:00.000Z
Updated: 2024-08-06T01:22:20.265Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4427 |
vulnerable | 2026-06-08 05:06:39.829425 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.114) allow remote authenticated users to inject arbitrary web script or HTML via the (1) page, (2) action, (3) folder_id, or (4) LangType parameter.
Published: 2015-06-09T14:00:00.000Z
Updated: 2024-08-06T06:11:12.914Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3624 |
vulnerable | 2026-06-08 05:06:38.400855 |
Details available
Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.120) allows remote attackers to hijack the authentication of content administrators for requests that delete content via a delete action.
Published: 2015-06-09T14:00:00.000Z
Updated: 2024-08-06T05:47:57.759Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.