Lumis Experience Platform

lumis_experience_platform

Vendor: Lumis • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-27931

1Lumis

1Lumis Experience Platform

Jun 17, 2026

Mar 3, 2021

N/A· v4

9.1 CRITICAL· v3

6.4 MEDIUM· v2

LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading...Show more