Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Hyland Subscribe
Filtered by product Nuxeo
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-32828 1 Hyland 1 Nuxeo 2023-01-11 N/A 6.1 MEDIUM
The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the `oauth2` REST API is vulnerable to Reflected Cross-Site Scripting (XSS). This XSS can be escalated to Remote Code Execution (RCE) by levering the automation API.