Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Eprints

First CVE: Mar 1, 2021Active for: 5 yearsTotal CVEs: 6

Eprints is a niche open-source institutional repository platform whose vulnerability footprint, though small in volume, spans a single widely deployed product used by academic and research institutions. The vendor's disclosures skew strongly toward critical-severity outcomes and frequently acquire public exploit code, with the recurring weakness classes—OS command injection, cross-site scripting, and XML external entity reference flaws—reflecting the parsing and input-handling demands of a web-based document management system. Defenders managing Eprints instances should prioritize patching and treat this platform as a sensitive target given its role in institutional data access; current severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
6
Total CVEs
More Total CVEs than 86% of tracked vendors
6.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 98% of tracked vendors
8.4
Avg CVSS Score
Higher Avg CVSS Score than 81% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Eprints over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 1, 2021
5 years ago
Most Recent CVE
Mar 1, 2021
1,971 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (6 CVEs).

6 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-26475MEDIUM
EPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI.
Mar 1, 20216.132NOYES
CVE-2021-3342CRITICAL
EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI.
Mar 1, 20219.830NONO
CVE-2021-26703CRITICAL
EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI.
Mar 1, 20219.830NONO
CVE-2021-26702MEDIUM
EPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi/dataset_dictionary URI.
Mar 1, 20216.130NOYES
CVE-2021-26476CRITICAL
EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI.
Mar 1, 20219.829NONO
CVE-2021-26704HIGH
EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI.
Mar 1, 20218.827NONO
View all 6 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products6 CVEs
33%
17%
50%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network6 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None4 (66.7%)
Unknown0 (0.0%)
Required2 (33.3%)
Privileges Required
Low1 (16.7%)
High0 (0.0%)
None5 (83.3%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (6 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
2 CVEs
33.3% of CVEs· 98th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Eprints.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Eprints — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Eprints's Products

View all 1 CNAs →

Top CWEs