PatchTheCVEentirex vulnerabilities and fixes
Recent CVEs affecting entirex, with upgrade or downgrade steps. 13 tracked.
entirex has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-27. Highest priority: CVE-2024-54171 (score 33/100).
- CVE-2025-0759 LOW 3.3 DOWNGRADE IBM EntireX 11.1 could allow a local user to unintentionally modify data timestamp integrity due to improper s
- CVE-2025-0158 MEDIUM 5.5 DOWNGRADE IBM EntireX 11.1 could allow a local user to cause a denial of service due to an unhandled error and fault iso
- CVE-2024-56812 LOW 3.3 DOWNGRADE IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error mess
- CVE-2024-56811 LOW 3.3 DOWNGRADE IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error mess
- CVE-2024-56810 LOW 3.3 DOWNGRADE IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error mess
- CVE-2024-56496 LOW 3.3 DOWNGRADE IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error mess
- CVE-2024-56495 LOW 3.3 DOWNGRADE IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error mess
- CVE-2024-56494 LOW 3.3 DOWNGRADE IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error mess
- CVE-2024-56493 LOW 3.3 DOWNGRADE IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error mess
- CVE-2024-56467 LOW 3.3 DOWNGRADE IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error mess
- CVE-2024-54171 HIGH 7.1 DOWNGRADE IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data
- CVE-2024-54170 MEDIUM 5.5 DOWNGRADE IBM EntireX 11.1 could allow a local user to cause a denial of service due to use of a regular expression with
- CVE-2024-54169 MEDIUM 6.5 DOWNGRADE IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system
FAQ
How do I fix entirex vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is entirex being exploited right now?
None of the tracked entirex CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which entirex CVE should I patch first?
CVE-2024-54171 currently ranks highest (33/100): IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data.