PatchTheCVEclearml enterprise server vulnerabilities and fixes
Recent CVEs affecting clearml enterprise server, with upgrade or downgrade steps. 2 tracked.
Also searched as: clearmlenterpriseserver.
clearml enterprise server has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-06. Highest priority: CVE-2024-43779 (score 46/100).
- CVE-2024-43779 HIGH 7.7 DOWNGRADE An information disclosure vulnerability exists in the Vault API functionality of ClearML Enterprise Server 3.2
- CVE-2024-39272 CRITICAL 9.0 DOWNGRADE A cross-site scripting (xss) vulnerability exists in the dataset upload functionality of ClearML Enterprise Se
FAQ
How do I fix clearml enterprise server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is clearml enterprise server being exploited right now?
None of the tracked clearml enterprise server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which clearml enterprise server CVE should I patch first?
CVE-2024-43779 currently ranks highest (46/100): An information disclosure vulnerability exists in the Vault API functionality of ClearML Enterprise Server 3.2.