Hyland Alfresco Content Services
3 CVEs affecting Hyland Alfresco Content Services. Latest disclosed: 2026-02-19. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-49964 | High | 8.8 | 2023-12-11 | An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may per… |
CVE-2026-26336 | High | 7.5 | 2026-02-19 | Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, th… |
CVE-2024-40347 | Medium | 6.1 | 2024-07-20 | A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute arbitrary code in the context of a user… |