enterprise resource planning vulnerabilities and fixes

Recent CVEs affecting enterprise resource planning, with upgrade or downgrade steps. 6 tracked.

Also searched as: enterpriseresourceplanning.

enterprise resource planning has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-07-19. Highest priority: CVE-2015-1312 (score 44/100).

• CVE-2022-34001 MEDIUM 6.5 UPGRADE Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously.
• CVE-2021-30114 MEDIUM 6.5 DOWNGRADE Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker
• CVE-2021-30113 MEDIUM 6.1 DOWNGRADE A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields
• CVE-2021-30112 MEDIUM 6.5 DOWNGRADE Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker
• CVE-2021-30111 MEDIUM 5.4 DOWNGRADE A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description f
• CVE-2015-1312 HIGH 7.5 MITIGATE The Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to obtain sensit

FAQ

How do I fix enterprise resource planning vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is enterprise resource planning being exploited right now?

None of the tracked enterprise resource planning CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which enterprise resource planning CVE should I patch first?

CVE-2015-1312 currently ranks highest (44/100): The Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to obtain sensit.

RSS feed for enterprise resource planning · ← Back to latest CVEs