PatchTheCVEinventory collector vulnerabilities and fixes
Recent CVEs affecting inventory collector, with upgrade or downgrade steps. 2 tracked.
Also searched as: inventorycollector.
inventory collector has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-12-18. Highest priority: CVE-2024-47480 (score 30/100).
- CVE-2024-37129 MEDIUM 6.7 UPGRADE Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability
- CVE-2024-47480 HIGH 7.8 UPGRADE Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Ac
FAQ
How do I fix inventory collector vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is inventory collector being exploited right now?
None of the tracked inventory collector CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which inventory collector CVE should I patch first?
CVE-2024-47480 currently ranks highest (30/100): Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Ac.