CVE-2008-5225

MEDIUM 4.3CVE-2008-5225 · Published 25/11/2008 · updated 16/06/2026

In short

CVE-2008-5225 is a MEDIUM (CVSS 4.3) vulnerability affecting docushare (xerox).
Chance of exploitation in the next 30 days (EPSS): 4.1%, higher than 90.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
docushare xerox	`= 4= 5= 5.00.00.2= 6.0= 6.0.1= 6.00.00.1≤ 6`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) SearchResults/ and (2) Services/ in dsdn/dsweb/, and (3) the default URI under unspecified docushare/dsweb/ServicesLib/Group-#/ directories.

References

secunia.com/advisories/30426 · Vendor Advisory
securityreason.com/securityalert/4638
securityfocus.com/archive/1/492766/100/0/threaded
securityfocus.com/archive/1/492960/100/0/threaded
securityfocus.com/bid/29430
securitytracker.com/id
vupen.com/english/advisories/2008/1701/references
docushare.xerox.com/doug/dsweb/Get/Document-20353/SA30426-workaround.html · Vendor Advisory
docushare.xerox.com/doug/dsweb/View/Collection-7503
exchange.xforce.ibmcloud.com/vulnerabilities/42748

More vulnerabilities in docushare

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free