ektron content management system vulnerabilities and fixes

Recent CVEs affecting ektron content management system, with upgrade or downgrade steps. 9 tracked.

Also searched as: ektroncontentmanagementsystem.

ektron content management system has 9 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2017-10-30. Highest priority: CVE-2012-5357 (score 69/100).

• CVE-2016-6201 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0
• CVE-2016-6133 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3(9.1.0.184.3.1
• CVE-2015-4427 LOW 3.5 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Managemen
• CVE-2015-3624 MEDIUM 5.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektro
• CVE-2015-0931 MEDIUM 6.8 DOWNGRADE Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parse
• CVE-2015-0923 MEDIUM 5.0 DOWNGRADE The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8
• CVE-2014-2729 LOW 3.5 DOWNGRADE Cross-site scripting (XSS) vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote auth
• CVE-2012-5358 CRITICAL 9.8 UPGRADE The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XS
• CVE-2012-5357 CRITICAL 9.8 UPGRADE Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript s

FAQ

How do I fix ektron content management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ektron content management system being exploited right now?

None of the tracked ektron content management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ektron content management system CVE should I patch first?

CVE-2012-5357 currently ranks highest (69/100): Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript s.

RSS feed for ektron content management system · ← Back to latest CVEs