PatchTheCVEcogent datahub vulnerabilities and fixes
Recent CVEs affecting cogent datahub, with upgrade or downgrade steps. 10 tracked.
Also searched as: cogentdatahub.
cogent datahub has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2016-03-29. Highest priority: CVE-2014-3789 (score 56/100).
- CVE-2016-2288 HIGH 7.8 UPGRADE Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to mod
- CVE-2014-3789 HIGH 7.5 UPGRADE GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute
- CVE-2014-3788 HIGH 7.5 UPGRADE Heap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows re
- CVE-2014-2354 MEDIUM 6.0 UPGRADE Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dep
- CVE-2014-2353 HIGH 7.1 UPGRADE Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbi
- CVE-2014-2352 HIGH 7.8 UPGRADE The directory specifier can include designators that can be used to traverse the directory path
- CVE-2013-0683 HIGH 7.1 UPGRADE UPGRADE The DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC Dat
- CVE-2013-0682 HIGH 7.5 UPGRADE UPGRADE Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22
- CVE-2013-0681 MEDIUM 5.0 UPGRADE UPGRADE Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22
- CVE-2013-0680 HIGH 7.5 UPGRADE UPGRADE Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC Dat
FAQ
How do I fix cogent datahub vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cogent datahub being exploited right now?
None of the tracked cogent datahub CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cogent datahub CVE should I patch first?
CVE-2014-3789 currently ranks highest (56/100): GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute .