PatchTheCVEkaazing websocket gateway vulnerabilities and fixes
Recent CVEs affecting kaazing websocket gateway, with upgrade or downgrade steps. 2 tracked.
Also searched as: kaazingwebsocketgateway.
kaazing websocket gateway has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2018-04-12. Highest priority: CVE-2017-6910 (score 51/100).
- CVE-2017-6910 HIGH 7.5 UPGRADE UPGRADE The HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1, Gateway - JMS
- CVE-2014-6309 HIGH 7.5 DOWNGRADE The HTTP and WebSocket engine components in the server in Kaazing Gateway 4.0.2, 4.0.3, and 4.0.4 and Gateway
FAQ
How do I fix kaazing websocket gateway vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kaazing websocket gateway being exploited right now?
None of the tracked kaazing websocket gateway CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kaazing websocket gateway CVE should I patch first?
CVE-2017-6910 currently ranks highest (51/100): The HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1, Gateway - JMS.