41 matches found
CVE-2025-27926
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files web.config containing passwords that are readable by unauthorized users...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
CVE-2025-27925
Nintex Automation versions 5.6 and 5.7, prior to 5.8, are affected by insecure deserialization of user input. The CVE-2025-27925 entry describes a vulnerability in Nintex Automation with impact across confidentiality, integrity, and availability (per CVSS scores: high- to critical-severity ranges...
CVE-2025-27926
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files web.config containing passwords that are readable by unauthorized users...
Nintex Automation 安全漏洞
Nintex Automation is a workflow automation software from Nintex. A security vulnerability exists in Nintex Automation versions prior to 5.8, which originates from a configuration file in the K2 SmartForms Designer folder that contains a password that can be read by an unauthorized user...
Nintex Automation 跨站脚本漏洞
Nintex Automation is a workflow automation software from Nintex. A cross-site scripting vulnerability exists in Nintex Automation versions prior to 5.8. An attacker can exploit this vulnerability to perform a cross-site scripting attack...
CVE-2025-27924
Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action...
CVE-2025-27924
CVE-2025-27924 affects Nintex Automation 5.6 and 5.7 prior to 5.8, with a stored XSS in the “Navigate to a URL” action. Impact details per sources indicate a stored cross-site scripting vulnerability, enabling an attacker to inject script via that action. The indicated remediation is to upgrade t...
CVE-2022-38167
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...
CVE-2022-38167
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...
Cross site scripting
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...
CVE-2022-38167
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...
CVE-2022-38167
Technical details (affected product/version, root cause, patch status) are not publicly provided in the connected documents; monitor for updates on CVE-2022-38167.
Nintex Workflow plugin SharePoint 跨站脚本漏洞
Nintex Workflow plugin is a workflow designer plugin from Nintex Corporation, USA. A security vulnerability exists in Nintex Workflow plugin SharePoint version 5.2.2.30, which originates from a vulnerability that allows attackers to implement cross-site scripting...
CVE-2022-38167
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...
Description of the security update for SharePoint Foundation 2013: September 13, 2022 (KB5002267)
Description of the security update for SharePoint Foundation 2013: September 13, 2022 KB5002267 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint remote code execution vulnerability. To learn more about the...
Description of the security update for SharePoint Enterprise Server 2016: September 13, 2022 (KB5002269)
None None...
Description of the security update for SharePoint Server 2019: September 13, 2022 (KB5002258)
None None...
Description of the security update for SharePoint Foundation 2013: September 13, 2022 (KB5002159)
Description of the security update for SharePoint Foundation 2013: September 13, 2022 KB5002159 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...