PatchTheCVEportal search vulnerabilities and fixes
Recent CVEs affecting portal search, with upgrade or downgrade steps. 3 tracked.
Also searched as: portalsearch.
portal search has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-02-14. Highest priority: CVE-2007-0921 (score 53/100).
- CVE-2007-0923 HIGH 7.8 MITIGATE buscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information (business logic
- CVE-2007-0922 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to
- CVE-2007-0921 HIGH 9.4 MITIGATE Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the que
FAQ
How do I fix portal search vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is portal search being exploited right now?
None of the tracked portal search CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which portal search CVE should I patch first?
CVE-2007-0921 currently ranks highest (53/100): Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the que.