observium vulnerabilities and fixes

Recent CVEs affecting observium, with upgrade or downgrade steps. 3 tracked.

observium has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-01-15. Highest priority: CVE-2024-47002 (score 60/100).

• CVE-2024-47140 HIGH 8.7 DOWNGRADE A cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24.4.13528
• CVE-2024-47002 HIGH 8.7 DOWNGRADE A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528
• CVE-2024-45061 HIGH 8.7 DOWNGRADE A cross-site scripting (xss) vulnerability exists in the weather map editor functionality of Observium CE 24.4

FAQ

How do I fix observium vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is observium being exploited right now?

None of the tracked observium CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which observium CVE should I patch first?

CVE-2024-47002 currently ranks highest (60/100): A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528.

RSS feed for observium · ← Back to latest CVEs