Skip to content
OpenAdvisories

Vendor

Cmdbuild

1 known vulnerabilities.

Products

CMDBuild 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2021-47925

    CMDBuild 3.3.2 Multiple Stored Cross-Site Scripting

    CMDBuild 3.3.2 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject arbitrary web script or HTML via crafted input in card creation and file upload endpoints. Attackers can inject XSS payloads through Empl…

    Cmdbuild CMDBuild