Sitescape's vulnerability profile centers on its Forum product line, a web-based collaboration and content-management platform, with the durable signal rooted in code-injection weaknesses that reflect risks common to server-side scripting and dynamic content handling. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Sitescape over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-6515HIGH support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string. | Dec 21, 2007 | 7.5 | 38 | NO | YES |
CVE-2006-2676MEDIUM Dispatch.cgi/_user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames. | May 31, 2006 | 5.0 | 15 | NO | NO |
CVE-2006-2677MEDIUM SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain | May 31, 2006 | 5.0 | 15 | NO | NO |
Multiple cross-site scripting (XSS) vulnerabilities in SiteScape Forum before 7.3 allow remote attackers to inject arbitrary web script or HTML via the user name field in the login | Jul 17, 2007 | 2.6 | 13 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Sitescape.
Media articles that mention a CVE ID that affects a product developed by Sitescape — matched by CVE ID, not by vendor name.