PatchTheCVEjobscheduler vulnerabilities and fixes
Recent CVEs affecting jobscheduler, with upgrade or downgrade steps. 8 tracked.
jobscheduler has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-07-13. Highest priority: CVE-2020-12712 (score 60/100).
- CVE-2023-37272 MEDIUM 6.3 UPGRADE JS7 is an Open Source Job Scheduler
- CVE-2020-6856 MEDIUM 6.5 DOWNGRADE An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.
- CVE-2020-6855 MEDIUM 6.5 DOWNGRADE A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows
- CVE-2020-6854 MEDIUM 5.4 DOWNGRADE A cross-site scripting (XSS) vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 al
- CVE-2020-12712 HIGH 7.5 UPGRADE A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobSchedul
- CVE-2014-5393 MEDIUM 4.0 UPGRADE Directory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4
- CVE-2014-5392 MEDIUM 5.8 UPGRADE XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before 1.7.4241 allows remote
- CVE-2014-5391 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler befor
FAQ
How do I fix jobscheduler vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jobscheduler being exploited right now?
None of the tracked jobscheduler CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jobscheduler CVE should I patch first?
CVE-2020-12712 currently ranks highest (60/100): A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobSchedul.