Hyland

Hyland develops a focused portfolio of enterprise content-management and document-processing platforms, primarily OnBase and Alfresco-based products, that handle sensitive business records and workflows across large organizations. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and span a range of weakness classes including deserialization flaws, path traversal, cross-site scripting, and memory-safety issues in document filters and transformation services. The exposure reflects the parsing and privilege demands inherent to systems that ingest untrusted documents and execute transformations on behalf of users, creating a meaningful surface for both code-execution and data-escape vectors. Defenders should prioritize this vendor's advisories given the criticality classification tendency and the sensitive data typically handled by these platforms; current severity and exploitation counts are shown alongside this summary.