Sitecore Sitecore.net
2 CVEs affecting Sitecore Sitecore.net. Latest disclosed: 2018-04-27. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7669 | High | 7.5 | 2018-04-27 | An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory traversal… |
CVE-2017-9356 | Medium | 6.1 | 2017-06-23 | Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI. |