Filtered by vendor Episerver
                         Subscriptions
                    
                    
                
                        Filtered by product Ektron Cms
                         Subscriptions
                    
                    
                
                    Total
                    1 CVE
                
            | CVE | Vendors | Products | Updated | CVSS v3.1 | 
|---|---|---|---|---|
| CVE-2018-12596 | 1 Episerver | 1 Ektron Cms | 2024-11-21 | N/A | 
| Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available exclusively for local admins). | ||||
                            
                                
                                
                                    Page 1 of 1.