PatchTheCVEcontent analysis vulnerabilities and fixes
Recent CVEs affecting content analysis, with upgrade or downgrade steps. 6 tracked.
Also searched as: contentanalysis.
content analysis has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-06-01. Highest priority: CVE-2023-23952 (score 57/100).
- CVE-2023-23955 HIGH 8.1 UPGRADE UPGRADE Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Server-Side
- CVE-2023-23954 MEDIUM 5.4 UPGRADE UPGRADE Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cros
- CVE-2023-23953 HIGH 7.8 UPGRADE UPGRADE Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation
- CVE-2023-23952 CRITICAL 9.8 UPGRADE UPGRADE Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Inj
- CVE-2016-9092 HIGH 8.8 DOWNGRADE DOWNGRADE The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management con
- CVE-2015-3364 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in the Content Analysis module before 6.x-1.7 for Drupal allows remot
FAQ
How do I fix content analysis vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is content analysis being exploited right now?
None of the tracked content analysis CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which content analysis CVE should I patch first?
CVE-2023-23952 currently ranks highest (57/100): Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Inj.