open source security information management vulnerabilities and fixes

Recent CVEs affecting open source security information management, with upgrade or downgrade steps. 3 tracked.

Also searched as: opensourcesecurityinformationmanagement.

open source security information management has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-03-14. Highest priority: CVE-2018-7279 (score 60/100).

• CVE-2018-7279 CRITICAL 9.8 UPGRADE UPGRADE A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
• CVE-2015-4046 HIGH 7.2 UPGRADE The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbi
• CVE-2015-4045 MEDIUM 6.7 UPGRADE The sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 allows local users to gain pr

FAQ

How do I fix open source security information management vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is open source security information management being exploited right now?

None of the tracked open source security information management CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which open source security information management CVE should I patch first?

CVE-2018-7279 currently ranks highest (60/100): A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1..

RSS feed for open source security information management · ← Back to latest CVEs