Activeweb Contentserver — known CVE vulnerabilities

Every CVE whose affected-product data names Activeweb Contentserver, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2007-3013 — CVSS 6.5 (medium): SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute…
• CVE-2007-3014 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers to inject arbitrary…
• CVE-2007-3017 — CVSS 4.0 (medium): The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only filters malicious tags from articles sent to…
• CVE-2007-3018 — CVSS 4.0 (medium): activeWeb contentserver CMS before 5.6.2964 does not limit the file-creation ability of editors who have restricted accounts, which allows…