PatchTheCVEmetadefender vulnerabilities and fixes
Recent CVEs affecting metadefender, with upgrade or downgrade steps. 3 tracked.
metadefender has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-09-19. Highest priority: CVE-2022-32272 (score 68/100).
- CVE-2022-40778 MEDIUM 5.4 UPGRADE A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows atta
- CVE-2022-32273 MEDIUM 4.3 UPGRADE As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2
- CVE-2022-32272 CRITICAL 9.8 UPGRADE OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Securit
FAQ
How do I fix metadefender vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is metadefender being exploited right now?
None of the tracked metadefender CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which metadefender CVE should I patch first?
CVE-2022-32272 currently ranks highest (68/100): OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Securit.