Bloomreach Experience Manager
3 CVEs affecting Bloomreach Experience Manager. Latest disclosed: 2021-03-11. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-14987 | High | 7.2 | 2021-03-11 | An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows remote attackers to execute arbitrary code because there is a m… |
CVE-2020-14989 | Medium | 6.5 | 2021-03-11 | An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows CSRF if the attacker uses GET where POST was intended. |
CVE-2020-14988 | Medium | 5.4 | 2021-03-11 | An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage parameter, the text… |