PatchTheCVEidce vulnerabilities and fixes
Recent CVEs affecting idce, with upgrade or downgrade steps. 2 tracked.
idce has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-06-02. Highest priority: CVE-2022-30496 (score 54/100).
- CVE-2022-30496 HIGH 7.5 DOWNGRADE SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads i
- CVE-2020-23284 HIGH 7.5 DOWNGRADE Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx p
FAQ
How do I fix idce vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is idce being exploited right now?
None of the tracked idce CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which idce CVE should I patch first?
CVE-2022-30496 currently ranks highest (54/100): SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads i.