epesi vulnerabilities and fixes

Recent CVEs affecting epesi, with upgrade or downgrade steps. 17 tracked.

epesi has 17 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2017-09-22. Highest priority: CVE-2017-9624 (score 42/100).

• CVE-2017-9624 MEDIUM 6.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers
• CVE-2017-9623 MEDIUM 6.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers
• CVE-2017-9622 MEDIUM 6.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers
• CVE-2017-9621 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in
• CVE-2017-9366 MEDIUM 4.8 UPGRADE Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Base/Dashboar
• CVE-2017-8763 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI in Telaxus/EPE
• CVE-2017-6491 MEDIUM 6.1 DOWNGRADE Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1
• CVE-2017-6490 MEDIUM 6.1 DOWNGRADE Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1
• CVE-2017-6489 MEDIUM 6.1 DOWNGRADE Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1
• CVE-2017-6488 MEDIUM 6.1 DOWNGRADE Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1
• CVE-2017-6487 MEDIUM 6.1 DOWNGRADE Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1
• CVE-2017-14717 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.
• CVE-2017-14716 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter.
• CVE-2017-14715 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter.
• CVE-2017-14714 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter.
• CVE-2017-14713 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter.
• CVE-2017-14712 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.

FAQ

How do I fix epesi vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is epesi being exploited right now?

None of the tracked epesi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which epesi CVE should I patch first?

CVE-2017-9624 currently ranks highest (42/100): Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers .

RSS feed for epesi · ← Back to latest CVEs