aryanic vulnerabilities

Products

• high cms 1
• highportal 1

Latest aryanic CVEs

Newest publication first

1. CVE-2020-23517 Cross Site Scripting (XSS) vulnerability in Aryanic HighMail (High CMS) versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm.

   Published 2021-03-26

   Medium·CVSS 6.1 EPSS 7.3%

   Cross Site Scripting (XSS) vulnerability in Aryanic HighMail (High CMS) versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm.

2. CVE-2018-17964 Aryanic HighPortal 12.5 has XSS via an Add Tags action.

   Published 2018-10-17

   Medium·CVSS 6.1 EPSS 0.96%

   Aryanic HighPortal 12.5 has XSS via an Add Tags action.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.