Sitescape Sitescape Forum — known CVE vulnerabilities

Every CVE whose affected-product data names Sitescape Sitescape Forum, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2006-2676 — CVSS 5.0 (medium): Dispatch.cgi/_user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote…
• CVE-2006-2677 — CVSS 5.0 (medium): SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control…
• CVE-2007-3807 — CVSS 2.6 (low): Multiple cross-site scripting (XSS) vulnerabilities in SiteScape Forum before 7.3 allow remote attackers to inject arbitrary web script or…