PatchTheCVE1c\ vulnerabilities and fixes
Recent CVEs affecting 1c\, with upgrade or downgrade steps. 1 tracked.
1c\ has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-01-13. Highest priority: CVE-2021-3131 (score 47/100).
- CVE-2021-3131 HIGH 7.5 UPGRADE The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL paramet
FAQ
How do I fix 1c\ vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 1c\ being exploited right now?
None of the tracked 1c\ CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 1c\ CVE should I patch first?
CVE-2021-3131 currently ranks highest (47/100): The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL paramet.