PatchTheCVEmango automation vulnerabilities and fixes
Recent CVEs affecting mango automation, with upgrade or downgrade steps. 8 tracked.
Also searched as: mangoautomation.
mango automation has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2015-10-28. Highest priority: CVE-2015-7901 (score 50/100).
- CVE-2015-7904 MEDIUM 6.5 DOWNGRADE Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 bu
- CVE-2015-7903 MEDIUM 6.5 DOWNGRADE SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 all
- CVE-2015-7902 MEDIUM 5.0 DOWNGRADE Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages
- CVE-2015-7901 MEDIUM 6.5 DOWNGRADE Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users
- CVE-2015-7900 MEDIUM 4.3 DOWNGRADE Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain
- CVE-2015-6494 LOW 3.5 DOWNGRADE Cross-site scripting (XSS) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0
- CVE-2015-6493 MEDIUM 6.8 DOWNGRADE Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x throug
- CVE-2015-1179 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and e
FAQ
How do I fix mango automation vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mango automation being exploited right now?
None of the tracked mango automation CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mango automation CVE should I patch first?
CVE-2015-7901 currently ranks highest (50/100): Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users.