PatchTheCVEon-premise vulnerabilities and fixes
Recent CVEs affecting on-premise, with upgrade or downgrade steps. 3 tracked.
Also searched as: on premise.
on-premise has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-06-09. Highest priority: CVE-2020-10569 (score 66/100).
- CVE-2022-25152 CRITICAL 9.9 UPGRADE UPGRADE The ITarian platform (SAAS / on-premise) offers the possibility to run code on agents via a function called pr
- CVE-2022-25151 HIGH 7.5 UPGRADE UPGRADE Within the Service Desk module of the ITarian platform (SAAS and on-premise), a remote attacker can obtain sen
- CVE-2020-10569 CRITICAL 9.8 DOWNGRADE SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack
FAQ
How do I fix on-premise vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is on-premise being exploited right now?
None of the tracked on-premise CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which on-premise CVE should I patch first?
CVE-2020-10569 currently ranks highest (66/100): SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack.