6.0.2

DATE	CVE	VULNERABILITY TITLE	RISK
2014-12-27	CVE-2013-4793	Improper Authentication vulnerability in Umbraco CMS The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does not require authentication, which allows remote attackers to execute arbitrary ASP.NET code via a crafted SOAP request. network low complexity umbraco CWE-287	7.5