Lumis vulnerabilities

Products

• Experience Platform 5

Newest

• lumis experience platform A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass... CVE-2024-33329 7.5 HighJune 26, 2024
• lumis experience platform A cross-site scripting (XSS) vulnerability in the component main.jsp of Lumisxp v15.0.x to v16.1... CVE-2024-33328 6.1 MediumJune 26, 2024
• lumis experience platform A cross-site scripting (XSS) vulnerability in the component UrlAccessibilityEvaluation.jsp of... CVE-2024-33327 6.1 MediumJune 26, 2024
• lumis experience platform A cross-site scripting (XSS) vulnerability in the component XsltResultControllerHtml.jsp of... CVE-2024-33326 6.1 MediumJune 26, 2024
• lumis experience platform LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API... CVE-2021-27931 EPSS 18.1% 9.1 CriticalMarch 3, 2021