400 matches found
CVE-2023-33653
Sitecore Experience Platform XP v9.3 was discovered to contain an authenticated remote code execution RCE vulnerability via the component /Applications/Content%20Manager/Execute.aspx?cmd=convert&mode=HTML...
PT-2023-24432 · Sitecore · Sitecore Experience Commerce +2
Name of the Vulnerable Software and Affected Versions: Sitecore Experience Platform XP versions 9.0 Initial Release through 13.0 Initial Release Sitecore Experience Manager XM versions 9.0 Initial Release through 13.0 Initial Release Sitecore Experience Commerce XC versions 9.0 Initial Release...
CVE-2023-33653
Sitecore Experience Platform XP v9.3 was discovered to contain an authenticated remote code execution RCE vulnerability via the component /Applications/Content%20Manager/Execute.aspx?cmd=convert&mode=HTML...
CVE-2023-33651
CVE-2023-33651 affects Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) from 9.0 Initial Release through 13.0 Initial Release. The vulnerability is in the MVC Device Simulator and allows attackers to bypass authorization rules. The connected PT-Security rep...
CVE-2023-33651
An issue in the MVC Device Simulator of Sitecore Experience Platform XP, Experience Manager XM, and Experience Commerce XC v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules...
Sitecore Experience Platform 安全漏洞
Sitecore Experience Platform XP is a suite of customer digital experience platforms from Sitecore, Denmark. A security vulnerability exists in Sitecore Experience Platform XP version 9.3, which stems from a Remote Code Execution RCE vulnerability in authentication via the component...
CVE-2023-33652
Sitecore Experience Platform XP v9.3 was discovered to contain an authenticated remote code execution RCE vulnerability via the component /sitecore/shell/Invoke.aspx...
Sitecore Experience Platform 安全漏洞
Sitecore Experience Platform XP is a suite of customer digital experience platforms from Sitecore, Denmark. A security vulnerability exists in Sitecore Experience Platform XP version 9.3, which originates from a Remote Code Execution RCE vulnerability in authentication via the component...
Liferay Portal和Liferay DXP 跨站脚本漏洞
Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...
PT-2023-24586
Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3.4 through 7.4.3.68 Liferay DXP versions 7.3 before update 24 Liferay DXP versions 7.4 before update 69 Description A cross-site scripting XSS issue in the Layout module allows remote attackers to inject arbitrary we...
Liferay Portal和Liferay DXP 安全漏洞
Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...
PT-2023-24590 · Liferay · Liferay Dxp +1
Name of the Vulnerable Software and Affected Versions: Liferay Portal version 7.4.3.67 Liferay DXP 7.4 update 67 Description: The issue allows remote attackers to download any file from Document and Media via a crafted URL, due to the Dynamic Data Mapping module not limiting Document and Media...
CVE-2023-27068
Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary code via ValidationResult.aspx...
Sitecore Experience Platform 代码问题漏洞
Sitecore Experience Platform XP is a suite of customer digital experience platforms from Sitecore, Denmark. A security vulnerability exists in Sitecore Experience Platform version 10.2 and earlier, which stems from a deserialization vulnerability in the presence of untrustworthy data, allowing...
CVE-2023-27068
Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary code via ValidationResult.aspx...
CVE-2023-27068
CVE-2023-27068 affects Sitecore Experience Platform (XP) up to and including version 10.2. The issue is a deserialization of untrusted data via ValidationResult.aspx that enables remote code execution. Remediation: upgrade to Sitecore XP 10.2 or later (per PT-2023-20930). No exploitation details ...
PT-2023-20930 · Sitecore · Sitecore Experience Platform
Name of the Vulnerable Software and Affected Versions: Sitecore Experience Platform versions prior to 10.2 Description: The issue allows remote attackers to run arbitrary code. This is due to the deserialization of untrusted data. The exploitation occurs via ValidationResult.aspx. Recommendations...
CVE-2023-27067
Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx...
