PatchTheCVEeframework vulnerabilities and fixes
Recent CVEs affecting eframework, with upgrade or downgrade steps. 7 tracked.
eframework has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 7. Most recent: 2020-07-24. Highest priority: CVE-2020-15922 (score 69/100).
- CVE-2020-15924 HIGH 7.5 UPGRADE There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure
- CVE-2020-15923 HIGH 7.5 UPGRADE Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal.
- CVE-2020-15922 CRITICAL 9.8 UPGRADE There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execu
- CVE-2020-15921 CRITICAL 9.8 UPGRADE Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access
- CVE-2020-15920 CRITICAL 9.8 UPGRADE There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Co
- CVE-2020-15919 MEDIUM 6.1 UPGRADE A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0.
- CVE-2020-15918 MEDIUM 5.4 UPGRADE Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0.
FAQ
How do I fix eframework vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eframework being exploited right now?
None of the tracked eframework CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eframework CVE should I patch first?
CVE-2020-15922 currently ranks highest (69/100): There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execu.