PatchTheCVEehealth vulnerabilities and fixes
Recent CVEs affecting ehealth, with upgrade or downgrade steps. 4 tracked.
ehealth has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-03-26. Highest priority: CVE-2021-28248 (score 54/100).
- CVE-2021-28248 HIGH 7.5 UPGRADE CA eHealth Performance Manager through 6.3.2.12 is affected by Improper Restriction of Excessive Authenticatio
- CVE-2021-28246 HIGH 7.8 UPGRADE CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked S
- CVE-2016-6152 HIGH 8.8 DOWNGRADE DOWNGRADE CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of service or p
- CVE-2016-6151 HIGH 8.8 DOWNGRADE CA eHealth 6.2.x allows remote authenticated users to cause a denial of service or possibly execute arbitrary
FAQ
How do I fix ehealth vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ehealth being exploited right now?
None of the tracked ehealth CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ehealth CVE should I patch first?
CVE-2021-28248 currently ranks highest (54/100): CA eHealth Performance Manager through 6.3.2.12 is affected by Improper Restriction of Excessive Authenticatio.