PatchTheCVEjetspeed vulnerabilities and fixes
Recent CVEs affecting jetspeed, with upgrade or downgrade steps. 7 tracked.
jetspeed has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2022-07-06. Highest priority: CVE-2022-32533 (score 67/100).
- CVE-2022-32533 CRITICAL 9.8 DOWNGRADE Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues i
- CVE-2016-2171 HIGH 7.5 UPGRADE The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Secu
- CVE-2016-0712 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arb
- CVE-2016-0711 MEDIUM 6.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to
- CVE-2016-0710 HIGH 8.8 UPGRADE Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remot
- CVE-2016-0709 HIGH 7.2 UPGRADE Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed
- CVE-2006-0248 MEDIUM 5.0 DOWNGRADE Virata-EmWeb web server 6_1_0, as used in (1) Intracom JetSpeed 500 and 520 and (2) Allied Data Technologies C
FAQ
How do I fix jetspeed vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jetspeed being exploited right now?
None of the tracked jetspeed CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jetspeed CVE should I patch first?
CVE-2022-32533 currently ranks highest (67/100): Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues i.