PatchTheCVEoffsite dr vulnerabilities and fixes
Recent CVEs affecting offsite dr, with upgrade or downgrade steps. 4 tracked.
Also searched as: offsitedr.
offsite dr has 4 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 4. Most recent: 2021-06-08. Highest priority: CVE-2021-26472 (score 61/100).
- CVE-2021-26474 HIGH 8.6 UPGRADE DOWNGRADE Various Vembu products allow an attacker to execute a (non-blind) http-only Cross Site Request Forgery (Other
- CVE-2021-26473 CRITICAL 9.8 UPGRADE UPGRADE In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php actio
- CVE-2021-26472 CRITICAL 10.0 UPGRADE UPGRADE In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /co
- CVE-2021-26471 CRITICAL 9.8 UPGRADE UPGRADE In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1, the http API located at /sgwebservice_o.php acce
FAQ
How do I fix offsite dr vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is offsite dr being exploited right now?
None of the tracked offsite dr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which offsite dr CVE should I patch first?
CVE-2021-26472 currently ranks highest (61/100): In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /co.