OpenKM Vulnerabilities and Affected Products
Vulnerabilities associated with Document Management Community.
Products
Clear product- OpenKM3 vulnerabilities
- OpenKM Community Edition3 vulnerabilities
- OpenKM Professional Edition3 vulnerabilities
- Document Management Community1 vulnerability
- OpenKM Document Management Community1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-3628MEDIUM | OpenKM Document Management Community vulnerable to Cross Site ScriptingOpenKM Community Edition in its 6.3.10 version is vulnerable to authenticated Cross-site scripting (XSS). A remote attacker could exploit this vulnerability by injecting arbitrary code via de uuid parameter. CWE-79Aug 30, 2021 | CVSS4.6v3.1 | EPSS0.916% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |