Bloomreach Experience Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Bloomreach Experience Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-14987 — CVSS 7.2 (high): An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows remote attackers to execute arbitrary code…
• CVE-2020-14989 — CVSS 6.5 (medium): An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows CSRF if the attacker uses GET where POST…
• CVE-2020-14988 — CVSS 5.4 (medium): An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage…