core portal vulnerabilities and fixes

Recent CVEs affecting core portal, with upgrade or downgrade steps. 1 tracked.

Also searched as: coreportal.

core portal has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-10-25. Highest priority: CVE-2019-18221 (score 34/100).

• CVE-2019-18221 MEDIUM 6.1 UPGRADE CoreHR Core Portal before 27.0.7 allows stored XSS.

FAQ

How do I fix core portal vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is core portal being exploited right now?

None of the tracked core portal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which core portal CVE should I patch first?

CVE-2019-18221 currently ranks highest (34/100): CoreHR Core Portal before 27.0.7 allows stored XSS..

← Back to latest CVEs