PatchTheCVEdownloadcontrol vulnerabilities and fixes
Recent CVEs affecting downloadcontrol, with upgrade or downgrade steps. 2 tracked.
downloadcontrol has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-05-24. Highest priority: CVE-2006-2552 (score 41/100).
- CVE-2006-2553 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Jemscripts DownloadControl 1.0 allows remote attackers to inject a
- CVE-2006-2552 MEDIUM 5.0 DOWNGRADE Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid par
FAQ
How do I fix downloadcontrol vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is downloadcontrol being exploited right now?
None of the tracked downloadcontrol CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which downloadcontrol CVE should I patch first?
CVE-2006-2552 currently ranks highest (41/100): Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid par.