content management server vulnerabilities and fixes

Recent CVEs affecting content management server, with upgrade or downgrade steps. 7 tracked.

Also searched as: contentmanagementserver.

content management server has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-04-10. Highest priority: CVE-2007-0938 (score 65/100).

CVE-2007-0939 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 a
CVE-2007-0938 HIGH 10.0 DOWNGRADE Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters i
CVE-2006-6388 MEDIUM 6.8 MITIGATE Cross-site scripting (XSS) vulnerability in naprednaPretraga.php in LINK Content Management Server (CMS) allow
CVE-2003-0002 MEDIUM 6.8 DOWNGRADE Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MC
CVE-2002-0719 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001
CVE-2002-0718 HIGH 7.5 DOWNGRADE Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and
CVE-2002-0700 HIGH 7.5 DOWNGRADE Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server

FAQ

How do I fix content management server vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is content management server being exploited right now?

None of the tracked content management server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which content management server CVE should I patch first?

CVE-2007-0938 currently ranks highest (65/100): Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters i.

RSS feed for content management server · ← Back to latest CVEs