commonspot content server vulnerabilities and fixes

Recent CVEs affecting commonspot content server, with upgrade or downgrade steps. 16 tracked.

Also searched as: commonspotcontentserver.

commonspot content server has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 16. Most recent: 2014-04-15. Highest priority: CVE-2014-2874 (score 58/100).

• CVE-2014-2874 HIGH 10.0 UPGRADE PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via s
• CVE-2014-2873 MEDIUM 5.0 UPGRADE PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not require authentication for access to log files
• CVE-2014-2872 MEDIUM 5.0 UPGRADE PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain potentially sensitive
• CVE-2014-2871 MEDIUM 5.0 UPGRADE PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on l
• CVE-2014-2870 MEDIUM 5.0 UPGRADE The default configuration of PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 uses cleartext for storage
• CVE-2014-2869 MEDIUM 5.0 UPGRADE PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain sensitive information
• CVE-2014-2868 HIGH 7.5 UPGRADE PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to modify the flow of execution
• CVE-2014-2867 HIGH 10.0 UPGRADE Unrestricted file upload vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote
• CVE-2014-2866 HIGH 10.0 UPGRADE PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on client JavaScript code for access restriction
• CVE-2014-2865 HIGH 7.5 UPGRADE PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restr
• CVE-2014-2864 HIGH 10.0 UPGRADE Multiple directory traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow r
• CVE-2014-2863 HIGH 10.0 UPGRADE Multiple absolute path traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 all
• CVE-2014-2862 MEDIUM 6.5 UPGRADE PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not check authorization in unspecified situations,
• CVE-2014-2861 MEDIUM 4.3 UPGRADE Incomplete blacklist vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote att
• CVE-2014-2860 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3
• CVE-2014-2859 HIGH 7.5 UPGRADE PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restr

FAQ

How do I fix commonspot content server vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is commonspot content server being exploited right now?

None of the tracked commonspot content server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which commonspot content server CVE should I patch first?

CVE-2014-2874 currently ranks highest (58/100): PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via s.

RSS feed for commonspot content server · ← Back to latest CVEs