https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-37776.htmlhttps://patchthecve.com/cve/CVE-2024-37776.htmlSun, 05 Jul 2026 01:19:59 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens.https://patchthecve.com/cve/CVE-2024-37775.htmlhttps://patchthecve.com/cve/CVE-2024-37775.htmlSun, 05 Jul 2026 01:19:59 +0000HIGH 7.5: Incorrect access control in Sunbird DCIM dcTrack v9.1.2 allows attackers to create or update a ticket with a location which bypasses an RBAC check.https://patchthecve.com/cve/CVE-2024-37774.htmlhttps://patchthecve.com/cve/CVE-2024-37774.htmlSun, 05 Jul 2026 01:19:58 +0000HIGH 8.0: A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens.https://patchthecve.com/cve/CVE-2024-37773.htmlhttps://patchthecve.com/cve/CVE-2024-37773.htmlSun, 05 Jul 2026 01:19:58 +0000MEDIUM 4.8: An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen.