PatchTheCVEcipace vulnerabilities and fixes
Recent CVEs affecting cipace, with upgrade or downgrade steps. 4 tracked.
cipace has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-02-11. Highest priority: CVE-2024-50620 (score 38/100).
- CVE-2024-50620 HIGH 8.8 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document man
- CVE-2024-50619 HIGH 8.8 UPGRADE Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attac
- CVE-2024-50618 MEDIUM 4.3 UPGRADE A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce befor
- CVE-2024-50617 HIGH 7.5 UPGRADE Vulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before 9.17 allow at
FAQ
How do I fix cipace vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cipace being exploited right now?
None of the tracked cipace CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cipace CVE should I patch first?
CVE-2024-50620 currently ranks highest (38/100): Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document man.