Security Announcement Zero-Day Vulnerability Discovered in Palo Alto Networks PAN-OS
Read More
en
en Global
fr-be Belgium
da Denmark
fi Finland
de-de Germany
en-my Malaysia
nl Netherlands
no Norway
poland Poland
sv Sweden
en-gb UK
Free Trial
Back to all posts
Hacker attacks & exploits , Vulnerability Management

Vulnerability in Episerver Detected by Holm Security

Holm Security’s security team is working hard to detect new vulnerabilities in widely used CMS systems. Many of our customers use Episerver, where we recently discovered a vulnerability. The websites affected range from government agencies to large companies.
Stefan Thelberg Stefan Thelberg — March 23, 2018
Vulnerability in Episerver Detected by Holm Security

Holm Security discovered a vulnerability in EPiServer’s SiteSeeker product. The vulnerability means that JavaScript in affected web pages can be modified to include malware from another seemingly trustworthy domain. EPiServer has been informed of the vulnerability and they have developed a hotfix for this vulnerability in EPiServer CMS version 11.0.1. EPiServer refers customers to “EPiServer internal ticket ID: ESEE-61”.

Some examples of affected web pages are:

  • The National Board of Housing, Building and Planning
  • MSB
  • Region Östergötland
  • Lerum municipality
  • Energy Agency
  • The Swedish Transport Administration
  • TRR Trygghetsrådet
  • The Public Health Agency of Sweden
  • Västervik municipality
  • Gävle fastigheter (real estate)
  • Kalmar county council
  • Red Cross
  • ESF Council
  • Konstfack
  • Värmland county council
  • The Financial Supervisory Authority of Sweden
Stefan Thelberg

Stefan Thelberg

Founder and CEO of Holm Security. Stefan is one of Sweden's most prominent cyber security entrepreneurs. With nearly 20 years of experience, he is a seasoned professional.

Follow me on LinkedIn

Latest articles

Browse all posts