« Volver al listado

CVE-2007-3256

Estado: ModificadaMedia (4)—

Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might facilitate malware distribution.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Xythos — Digital LockerXythos — Enterprise Document ManagerXythos — Webfile Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-3256",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-27T18:30:00.000",
  "references": [
    {
      "url": "http://osvdb.org/37614",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/25783",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/2845",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1018291",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1018292",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/472275/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/24521",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-004.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35086",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37614",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/25783",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/2845",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1018291",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1018292",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/472275/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24521",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-004.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35086",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might facilitate malware distribution."
    },
    {
      "lang": "es",
      "value": "Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), y posiblemente WebFile Server anterior a 6.0.46.1 permite a usuarios remotos autenticados asociar cabeceras HTTP de su elección con documentos, lo cual podría facilitar la distribución de malware."
    }
  ],
  "lastModified": "2026-06-16T22:41:21.913",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:xythos:digital_locker:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64943CF7-CA15-4A27-BEA9-7E57447953F1",
              "versionEndIncluding": "6.0.46.0"
            },
            {
              "criteria": "cpe:2.3:a:xythos:enterprise_document_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4FB9E86-37C0-4FB7-85E9-EF34DB918C26",
              "versionEndIncluding": "6.0.46.0"
            },
            {
              "criteria": "cpe:2.3:a:xythos:webfile_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BA9D3A6-06B5-40B1-89D3-40C0AF3ECC4A",
              "versionEndIncluding": "6.0.46.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}