PatchTheCVEcrew services vulnerabilities and fixes
Recent CVEs affecting crew services, with upgrade or downgrade steps. 1 tracked.
Also searched as: crewservices.
crew services has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2014-07-26. Highest priority: CVE-2014-4858 (score 44/100).
- CVE-2014-4858 HIGH 7.5 UPGRADE UPGRADE Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and e
FAQ
How do I fix crew services vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is crew services being exploited right now?
None of the tracked crew services CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which crew services CVE should I patch first?
CVE-2014-4858 currently ranks highest (44/100): Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and e.