easy address book web server vulnerabilities and fixes

Recent CVEs affecting easy address book web server, with upgrade or downgrade steps. 4 tracked.

Also searched as: easyaddressbookwebserver.

easy address book web server has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-10-04. Highest priority: CVE-2023-4491 (score 55/100).

• CVE-2023-4493 MEDIUM 6.1 DOWNGRADE Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the users_admin.ghp file that
• CVE-2023-4492 MEDIUM 6.1 DOWNGRADE Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, las
• CVE-2023-4491 CRITICAL 9.8 DOWNGRADE Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version
• CVE-2006-4654 MEDIUM 5.1 DOWNGRADE Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of s

FAQ

How do I fix easy address book web server vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is easy address book web server being exploited right now?

None of the tracked easy address book web server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which easy address book web server CVE should I patch first?

CVE-2023-4491 currently ranks highest (55/100): Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version.

RSS feed for easy address book web server · ← Back to latest CVEs