Approved changes feed: RSS · Atom

cpe:2.3:a:hyland:alfresco_transform_core:5.3.0:alpha1:*:*:*:*:*:*

part: a version: 5.3.0 update: alpha1

VendorHyland (4cbf6081-43e8-5c1e-b8e8-d0a0dad432d9)
ProductAlfresco Transform Core (d60f86c7-46d1-5c05-af98-520bdc42934e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26338 vulnerable 2026-06-03 15:18:05.561726 Hyland Alfresco Transformation Service SSRF
CRITICAL (9.8)
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality.
Published: 2026-02-19T17:03:23.521Z
Updated: 2026-03-02T14:49:40.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26337 vulnerable 2026-06-03 15:18:05.560765 Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF
HIGH (8.2)
Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal.
Published: 2026-02-19T17:01:25.527Z
Updated: 2026-02-20T19:08:14.840Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.