PatchTheCVEeyecms vulnerabilities and fixes
Recent CVEs affecting eyecms, with upgrade or downgrade steps. 2 tracked.
eyecms has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-11-07. Highest priority: CVE-2019-17605 (score 52/100).
- CVE-2019-17605 HIGH 8.8 UPGRADE A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over anothe
- CVE-2019-17604 MEDIUM 4.3 UPGRADE An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any cand
FAQ
How do I fix eyecms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eyecms being exploited right now?
None of the tracked eyecms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eyecms CVE should I patch first?
CVE-2019-17605 currently ranks highest (52/100): A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over anothe.