Appspace

6 CVEs across 2 Appspace products. Browse Appspace vulnerabilities, severities, and proof-of-concept exploits.

Appspace products with known CVEs

ProductCVEs
Appspace5
On-Prem1
Appspace CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2021-27704Medium6.52024-11-12Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page.
CVE-2021-27990High7.52021-04-14Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed w…
CVE-2021-27989Medium5.42021-04-14Appspace 6.2.4 is vulnerable to stored cross-site scripting (XSS) in multiple parameters within /medianet/sgcontentset.aspx.
CVE-2021-27670Critical9.82021-02-25Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.
CVE-2021-27564Medium5.42021-02-22A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored…
CVE-2020-5393Medium6.12020-01-07In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS.