Episerver 漏洞

时间轴

类型

Content Management System14

产品

EPiServer Ektron CMS12
EPiServer CMS2

修正

Official Fix12
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined14

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network14

身份验证

Not Defined0
High0
Low6
None8

用户交互

Not Defined0
Required8
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤50
≤64
≤72
≤82
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤54
≤60
≤74
≤80
≤92
≤100

VulDB

≤10
≤20
≤30
≤44
≤54
≤60
≤72
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤74
≤80
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k8
<2k0
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k14
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (3): CMS (2), Ektron CMS (10), Find (1)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2021-04-015.54.9EPiServer Find _click Redirect未知Proof-of-ConceptOfficial Fix0.001440.00CVE-2020-24550
2018-10-108.57.7EPiServer Ektron CMS activateuser.aspx 权限升级Content Management SystemProof-of-ConceptOfficial Fix0.370380.02CVE-2018-12596
2017-10-308.58.2EPiServer Ektron CMS XSLTCompiledTransform Remote Code ExecutionContent Management SystemNot DefinedOfficial Fix0.009040.00CVE-2012-5358
2017-10-308.58.2EPiServer Ektron CMS XSL Data ekajaxtransform.aspx XslCompiledTransform Remote Code ExecutionContent Management SystemHighOfficial Fix0.966760.00CVE-2012-5357
2017-07-255.24.9EPiServer Ektron CMS SelectUserGroup.aspx 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.004190.02CVE-2016-6133
2017-07-035.24.9EPiServer Ektron CMS content.aspx 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.004550.00CVE-2016-6201
2015-06-093.53.4EPiServer Ektron CMS workarea.aspx 跨网站脚本Content Management SystemNot DefinedOfficial Fix0.001250.00CVE-2015-4427
2015-06-094.34.1EPiServer Ektron CMS MenuActions.aspx 跨网站请求伪造Content Management SystemProof-of-ConceptOfficial Fix0.008610.04CVE-2015-3624
2015-02-137.37.0EPiServer Ektron CMS 权限升级Content Management SystemNot DefinedOfficial Fix0.004030.04CVE-2015-0931
2015-02-135.35.1EPiServer Ektron CMS XML External EntityContent Management SystemHighOfficial Fix0.774390.00CVE-2015-0923

3 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 3 results.

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!