Vendor
Hyland
34 known vulnerabilities in products by Hyland, 0 of them actively exploited (CISA KEV).
Key figures
34
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
14
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-49964 | Hyland Alfresco Content Services: Template Injection | 8.8 | |
| Critical | CVE-2026-58127 | PACSgear MediaWriter 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service | 9.8 | |
| Critical | CVE-2026-58126 | PACSgear PACS Scan 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service | 9.8 | |
| Critical | CVE-2018-6292 | Kofax Saperion Web Client: Remote Code Execution | 9.8 | |
| Critical | CVE-2020-25260 | Hyland Onbase: Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2018-3844 | Hyland Software Perceptive Document Filters: Use-After-Free | 8.8 | |
| Critical | CVE-2026-26221 | Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE | 9.8 | |
| High | CVE-2018-3851 | Hyland Software Perceptive Document Filters: Stack-Based Buffer Overflow | 8.8 | |
| High | CVE-2018-3845 | Hyland Software Perceptive Document Filters: Double Free | 8.8 | |
| High | CVE-2018-3855 | Hyland Software Perceptive Document Filters: Double Free | 8.8 | |
| Critical | CVE-2020-25254 | Hyland Onbase: SQL Injection | 9.8 | |
| Critical | CVE-2020-25258 | Hyland Onbase: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2020-25259 | Hyland Onbase: Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2020-25248 | Hyland Onbase: Path Traversal | 7.5 | |
| Critical | CVE-2020-25257 | Hyland Onbase: XML External Entity (XXE) | 9.8 | |
| Critical | CVE-2026-26339 | Hyland Alfresco Transformation Service Argument Injection RCE | 9.8 | |
| Critical | CVE-2020-25251 | Hyland Onbase: security vulnerability | 9.1 | |
| Critical | CVE-2020-25253 | Hyland Onbase: SQL Injection | 9.8 | |
| High | CVE-2020-25247 | Hyland Onbase: Path Traversal | 7.5 | |
| High | CVE-2018-19629 | Hyland Perceptive Content Server: Denial of Service | 7.5 | |
| High | CVE-2020-25255 | Hyland Onbase: Denial of Service | 7.5 | |
| High | CVE-2018-6293 | Kofax Saperion Web Client: security vulnerability | 7.5 | |
| Critical | CVE-2026-26338 | Hyland Alfresco Transformation Service SSRF | 9.8 | |
| High | CVE-2026-26336 | Hyland Alfresco Improper Authorization Arbitrary File Read | 7.5 | |
| High | CVE-2026-110359 | Hyland Desktop Host: Incorrect Default Permissions | 7.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,