Vulnerabilities > CVE-2007-3256 - Input Validation vulnerability in Xythos products

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
xythos
NVD
Published: 2007-06-27
Updated: 2018-10-16

Summary

Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might facilitate malware distribution.

Vulnerable Configurations

Part Description Count
Application
Xythos
3

References