Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Hannonhill Subscribe
Filtered by product Cascade
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-1088 1 Hannonhill 1 Cascade 2018-10-10 9.0 HIGH N/A
Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with "extension elements and extension functions" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime.