Skip to content

Alfresco vulnerabilities

Products

Newest

alfresco activiti Alfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection CVE-2026-116058 5.3 MediumOctober 25, 2026
activiti Activiti through 7.1.0.M6 Expression Injection via Mail Task CVE-2026-91145 7.1 HighSeptember 14, 2026
alfresco activiti Alfresco Activiti Process Variable Serialization System SerializableType.java createObjectInputStream deserialization CVE-2026-3967 5.3 MediumMarch 12, 2026
alfresco content services An issue in Alfresco Content Services v.23.3.0.7 allows a remote attacker to execute arbitrary... CVE-2024-29309 7.7 HighMay 2, 2024
alfresco Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via... CVE-2020-18327 6.1 MediumMarch 4, 2022
alfresco content services, transform services +1 more An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org... CVE-2021-41792 5.3 MediumOctober 21, 2021
alfresco share, community share +1 more An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community... CVE-2021-41791 5.4 MediumOctober 21, 2021
alfresco content services An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script... CVE-2021-41790 8.8 HighOctober 21, 2021
alfresco reset password, flexsolution alfrescoresetpassword +1 more Admin account takeover in Alfresco Reset Password CVE-2020-15181 9.3 CriticalSeptember 18, 2020
alfresco reset password The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an... CVE-2020-25728 8.8 HighSeptember 17, 2020
alfresco Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via... CVE-2020-8778 Public exploitFix available 5.4 MediumMarch 2, 2020
alfresco Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via... CVE-2020-8777 Public exploitFix available 5.4 MediumMarch 2, 2020
alfresco Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via... CVE-2020-8776 Public exploitFix available 5.4 MediumMarch 2, 2020
alfresco Alfresco Enterprise 5.2.4 allows stored XSS via an uploaded HTML document. CVE-2019-19496 5.4 MediumDecember 2, 2019
alfresco An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The... CVE-2019-14223 Public exploit 6.1 MediumSeptember 6, 2019
alfresco An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated,... CVE-2019-14222 Public exploit 9.8 CriticalSeptember 5, 2019
alfresco An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple... CVE-2019-14224 Public exploit 7.2 HighSeptember 5, 2019
alfresco The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider... CVE-2019-15566 9.8 CriticalAugust 26, 2019
alfresco Cross-site request forgery (CSRF) vulnerability in the Alfresco module before 6.x-1.3 for Drupal... CVE-2015-3366 5.8 MediumApril 21, 2015
alfresco community edition Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management... CVE-2014-9302 Public exploit 5.0 MediumDecember 7, 2014
alfresco Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community... CVE-2014-9301 Public exploit 6.4 MediumDecember 7, 2014
alfresco Cross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management... CVE-2014-9300 6.8 MediumDecember 7, 2014
alfresco Multiple cross-site scripting (XSS) vulnerabilities in Alfresco Enterprise before 4.1.6.13 allow... CVE-2014-2939 4.3 MediumJune 2, 2014