5.1
Moyenne
CVE-2026-11796 Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet…
Description
Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which could result in denial-of-service conditions affecting application availability. These servlets are designed to perform specific functions within production environment depending on how the Asset Suite application is configured.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Asset Suite 9.6 | 9.6.0 → 9.9.0 | Pas de correctif indiqué |
Autres CVE de Asset Suite
Les 5 CVE de Asset Suite →
CVE-2026-7395
Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file…
8.5
Élevée
CVE-2025-10217
A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log…
6.0
Moyenne
CVE-2025-2500
A vulnerability exists in the SOAP Web services of the Asset
Suite versions listed below
9.1
Critique
CVE-2025-1484
A vulnerability exists in the media upload component of the Asset
Suite versions listed below
6.3
Moyenne