Exlibrisgroup Aleph 500 — known CVE vulnerabilities

Every CVE whose affected-product data names Exlibrisgroup Aleph 500, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2014-3719 — CVSS 9.8 (critical): Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20…
• CVE-2014-3718 — CVSS 6.1 (medium): Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1…
• CVE-2022-24177 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows attackers to execute…