cbcvebase.

Dokmee Enterprise Content Management vulnerabilities

1 known vulnerability affecting dokmee/enterprise_content_management.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2023-47261P2CRITICALCVSS 9.8v7.4.62023-12-14
CVE-2023-47261 [CRITICAL] CVE-2023-47261: Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnec Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync /#/gettingstarted request contains a connection string for privileged SQL Server database access, and xp_cmdshell can be enabled.
nvd
Dokmee Enterprise Content Management vulnerabilities | cvebase