Sitecore Crm — known CVE vulnerabilities

Every CVE whose affected-product data names Sitecore Crm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-5965 — CVSS 6.7 (medium): The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a…
• CVE-2017-5966 — CVSS 4.9 (medium): Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on…