Alfresco

    Dashboard / Vendors

    Products: 8
    Vulnerabilities: 22
    Known Exploited: 0
    3
    Critical Level Threats
    4
    High Level Threats
    15
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-116058

    Alfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection

    Last Modified: Oct 29, 2026
    Published: Oct 25, 2026

    CVE-2026-3967

    Alfresco Activiti Process Variable Serialization System SerializableType.java createObjectInputStream deserialization

    Last Modified: Apr 22, 2026
    Published: Mar 12, 2026

    CVE-2024-29309

    An issue in Alfresco Content Services v.23.3.0.7 allows a remote attacker to execute arbitrary code via the Transfer Service.

    Last Modified: Apr 15, 2026
    Published: May 02, 2024

    CVE-2020-18327

    Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2

    Last Modified: Nov 21, 2024
    Published: Mar 04, 2022

    CVE-2021-41792

    An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services through 1.3. A crafted HTML file, once uploaded, could trigger an unexpected request by the transformation engine. The response to the request is not available to the attacker, i.e., this is blind SSRF.

    Last Modified: Nov 21, 2024
    Published: Oct 21, 2021
    Items Per Page