PatchTheCVEnablarch vulnerabilities and fixes
Recent CVEs affecting nablarch, with upgrade or downgrade steps. 2 tracked.
nablarch has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-03-12. Highest priority: CVE-2019-5918 (score 57/100).
- CVE-2019-5919 CRITICAL 9.1 DOWNGRADE An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 (5, and 5u1 to 5u13) a
- CVE-2019-5918 CRITICAL 9.1 DOWNGRADE Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to conduct XML External Entity (XXE) attacks via unspe
FAQ
How do I fix nablarch vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nablarch being exploited right now?
None of the tracked nablarch CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nablarch CVE should I patch first?
CVE-2019-5918 currently ranks highest (57/100): Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to conduct XML External Entity (XXE) attacks via unspe.