Webedition Webedition Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Webedition Webedition Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2014-2302 — CVSS 9.8 (critical): The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection…
• CVE-2014-2303 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in the file browser component (we_fs.php) in webEdition CMS before 6.2.7-s1.2 and 6.3.x through…
• CVE-2023-53883 — CVSS 7.2 (high): Webedition CMS v2.9.8.8 contains a remote code execution vulnerability that allows authenticated attackers to inject system commands…
• CVE-2024-28418 — CVSS 6.5 (medium): Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/we_cmd.php
• CVE-2024-28417 — CVSS 6.3 (medium): Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/we_cmd.php.
• CVE-2023-53884 — CVSS 5.4 (medium): Webedition CMS v2.9.8.8 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files…
• CVE-2014-5258 — CVSS 4.0 (medium): Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read…