Lumis Lumis Experience Platform — known CVE vulnerabilities
Every CVE whose affected-product data names Lumis Lumis Experience Platform, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2021-27931 — CVSS 9.1 (critical): LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can…