CVE-2018-18941: Vignette Content Management

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

In Vignette Content Management version 6, it is possible to gain remote access to administrator privileges by discovering the admin password in the vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin HTML source code, and then creating a privileged user account. NOTE: this product is discontinued.

Affected products

• Vignette Content Management: version 6 only

Published 2019-01-31. Last modified 2026-06-17.