Vulnerabilities > Alfresco > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-09-18 CVE-2020-15181 Unspecified vulnerability in Alfresco Reset Password
The Alfresco Reset Password add-on before version 1.2.0 relies on untrusted inputs in a security decision.
network
low complexity
alfresco
critical
9.8
2019-09-05 CVE-2019-14222 Insecure Default Initialization of Resource vulnerability in Alfresco
An issue was discovered in Alfresco Community Edition versions 6.0 and lower.
network
low complexity
alfresco CWE-1188
critical
9.8
2019-08-26 CVE-2019-15566 SQL Injection vulnerability in Alfresco
The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider.java.
network
low complexity
alfresco CWE-89
critical
9.8