Medium severity6.1NVD Advisory· Published Sep 19, 2017· Updated Jun 17, 2026

CVE-2015-3432

Description

Multiple cross-site scripting (XSS) vulnerabilities in Pydio (formerly AjaXplorer) before 6.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Pydio XSS Vulnerabilities."

Affected products

Pydio/Pydio2 versions
cpe:2.3:a:pydio:pydio:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pydio:pydio:*:*:*:*:*:*:*:*range: <=6.0.6
- (no CPE)range: <6.0.7

Patches

Vulnerability mechanics

References

pydio.com/en/community/releases/pydio-core/pydio-607-security-releasenvdPatchVendor Advisory
www.securityfocus.com/bid/74596nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000