PatchTheCVEcommunity server vulnerabilities and fixes
Recent CVEs affecting community server, with upgrade or downgrade steps. 6 tracked.
Also searched as: communityserver.
community server has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-12-10. Highest priority: CVE-2007-5969 (score 59/100).
- CVE-2007-5969 HIGH 7.1 DOWNGRADE UPGRADE MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23,
- CVE-2007-3782 LOW 3.5 DOWNGRADE MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table i
- CVE-2007-3781 MEDIUM 4.0 DOWNGRADE MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREA
- CVE-2007-3780 MEDIUM 5.0 UPGRADE MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a
- CVE-2007-0925 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attack
- CVE-2006-0535 MEDIUM 4.3 MITIGATE Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbit
FAQ
How do I fix community server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is community server being exploited right now?
None of the tracked community server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which community server CVE should I patch first?
CVE-2007-5969 currently ranks highest (59/100): MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23,.