knowledge vulnerabilities and fixes

Recent CVEs affecting knowledge, with upgrade or downgrade steps. 10 tracked.

knowledge has 10 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 7. Most recent: 2020-04-15. Highest priority: CVE-2020-2931 (score 61/100).

• CVE-2020-2932 MEDIUM 5.9 UPGRADE Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console)
• CVE-2020-2931 CRITICAL 9.8 UPGRADE Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Web Applications - InfoCenter)
• CVE-2020-2795 MEDIUM 6.3 UPGRADE Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console)
• CVE-2020-2791 CRITICAL 9.8 UPGRADE Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console)
• CVE-2020-2553 MEDIUM 4.8 UPGRADE Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console)
• CVE-2020-2524 MEDIUM 5.9 UPGRADE Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: InQuira Search)
• CVE-2020-2522 MEDIUM 4.3 DOWNGRADE Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console)
• CVE-2017-2097 HIGH 8.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in Knowledge versions prior to v1.7.0 allows remote attackers
• CVE-2016-3476 MEDIUM 6.5 DOWNGRADE Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote attackers
• CVE-2016-3475 MEDIUM 4.3 DOWNGRADE Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote authentic

FAQ

How do I fix knowledge vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is knowledge being exploited right now?

None of the tracked knowledge CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which knowledge CVE should I patch first?

CVE-2020-2931 currently ranks highest (61/100): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Web Applications - InfoCenter).

RSS feed for knowledge · ← Back to latest CVEs