PatchTheCVEiksoris vulnerabilities and fixes
Recent CVEs affecting iksoris, with upgrade or downgrade steps. 10 tracked.
iksoris has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-04-14. Highest priority: CVE-2024-49705 (score 29/100).
- CVE-2024-49709 MEDIUM 4.4 UPGRADE Internet Starter, one of SoftCOM iKSORIS system modules, allows for setting an arbitrary session cookie value
- CVE-2024-49708 MEDIUM 5.4 UPGRADE Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) at
- CVE-2024-49707 MEDIUM 6.1 UPGRADE Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting)
- CVE-2024-49706 MEDIUM 6.1 UPGRADE Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Open Redirect attacks by including b
- CVE-2024-49705 MEDIUM 6.5 UPGRADE Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of Servise (DoS)
- CVE-2024-13598 MEDIUM 6.1 UPGRADE Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting
- CVE-2024-10090 MEDIUM 6.1 UPGRADE Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting)
- CVE-2024-10089 MEDIUM 5.4 UPGRADE Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) at
- CVE-2024-10088 MEDIUM 6.1 UPGRADE Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting)
- CVE-2024-10087 MEDIUM 5.4 UPGRADE Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting)
FAQ
How do I fix iksoris vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is iksoris being exploited right now?
None of the tracked iksoris CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which iksoris CVE should I patch first?
CVE-2024-49705 currently ranks highest (29/100): Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of Servise (DoS) .