cbcvebase.

Lumis Experience Platform vulnerabilities

1 known vulnerability affecting lumis/lumis_experience_platform.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2021-27931P1CRITICALCVSS 9.1ExploitedPoCfixed in 10.0.02021-03-03
CVE-2021-27931 [CRITICAL] CWE-611 CVE-2021-27931: LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API re LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service.
nvd
Lumis Experience Platform vulnerabilities | cvebase