Sitecore Crm
2 CVEs affecting Sitecore Crm. Latest disclosed: 2017-05-23. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-5965 | Medium | 6.7 | 2017-05-23 | The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which… |
CVE-2017-5966 | Medium | 4.9 | 2017-05-23 | Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on sitecore/shell/download… |