Hyland

13 CVEs across 18 Hyland products. Browse Hyland vulnerabilities, severities, and proof-of-concept exploits.

Hyland products with known CVEs

ProductCVEs
Onbase15
Perceptive Document Filters4
Alfresco Community (Transform Core)3
Alfresco Content Services3
Alfresco Transformation Service (Enterprise)3
Alfresco Transform Core3
Alfresco Transform Service3
Pacsgear2
Saperion Web Client2
Alfresco Community1
Alfresco Community Edition1
Alfresco Enterprise1
Alfresco Enterprise Edition1
Nuxeo1
Onbase Workflow Timer Service1
Pacsgear Mediawriter1
Pacsgear Pacs Scan1
Perceptive Content Server1
Hyland CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-58127Critical9.82026-07-01PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registered with ObjectURIs RemoteObj and UIRemot…
CVE-2026-58126Critical9.82026-07-01PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulnerability that allows remote attackers to read and write arbitrary files by expl…
CVE-2026-26339Critical9.82026-02-19Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which ex…
CVE-2026-26338Critical9.82026-02-19Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functiona…
CVE-2026-26337High8.22026-02-19Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolut…
CVE-2026-26336High7.52026-02-19Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, th…
CVE-2026-26221Critical9.82026-02-13Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workflow.NTService.exe). An attacker who can…
CVE-2025-0557Medium4.32025-01-18A vulnerability classified as problematic has been found in Hyland Alfresco Community Edition and Alfresco Enterprise Edition up to 6.2.2. This affects an unkn…
CVE-2024-40347Medium6.12024-07-20A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute arbitrary code in the context of a user…
CVE-2023-49964High8.82023-12-11An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may per…
CVE-2021-32828Medium5.42023-01-05The Nuxeo Platform is an open source content management platform for building business applications. In version 11.5.109, the `oauth2` REST API is vulnerable t…
CVE-2022-23342Medium5.32022-06-21The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are vulnerable to a username enumerati…
CVE-2020-25260Critical9.82020-09-11An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It…
CVE-2020-25259Critical9.82020-09-11An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It…
CVE-2020-25258Critical9.82020-09-11An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It…
CVE-2020-25257Critical9.82020-09-11An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It…
CVE-2020-25256Critical9.12020-09-11An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. PKI…
CVE-2020-25255High7.52020-09-11An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It…
CVE-2020-25254Critical9.82020-09-11An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It…
CVE-2020-25253Critical9.82020-09-11An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It…
CVE-2020-25252High8.82020-09-11An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and be…
CVE-2020-25251Critical9.12020-09-11An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Cli…
CVE-2020-25250High7.52020-09-11An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Cli…
CVE-2020-25249Medium5.32020-09-11An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. The…
CVE-2020-25248High7.52020-09-11An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and be…
CVE-2020-25247High7.52020-09-11An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for writing to files, as demonstrated by th…
CVE-2018-19629High7.52019-07-16A Denial of Service vulnerability in the ImageNow Server service in Hyland Perceptive Content Server before 7.1.5 allows an attacker to crash the service via a…
CVE-2018-3855High7.82018-04-26In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting…
CVE-2018-3851High8.82018-04-26In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, an exploitable stack-based buffer overflow exists in the DOC-to-HTML conversion func…
CVE-2018-3845High8.82018-04-26In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting…
CVE-2018-3844High8.82018-04-26In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted DOCX document can lead to a use-after-free resulting in direct code execut…
CVE-2018-6293High7.52018-02-13Arbitrary File Read in Saperion Web Client version 7.5.2 83166.
CVE-2018-6292Critical9.82018-02-13Remote Code Execution in Saperion Web Client version 7.5.2 83166.