Back to search
CVE-2015-0931
Published: Feb 14, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to execute arbitrary code via a crafted XSLT document, related to a "resource injection" issue.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
VU#377644
third-party-advisory
x_refsource_CERT-VN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now