PatchTheCVEportfolio vulnerabilities and fixes
Recent CVEs affecting portfolio, with upgrade or downgrade steps. 9 tracked.
portfolio has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-12-26. Highest priority: CVE-2022-24254 (score 57/100).
- CVE-2022-24255 HIGH 8.8 DOWNGRADE Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain adminis
- CVE-2022-24254 HIGH 8.8 DOWNGRADE An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 a
- CVE-2022-24253 HIGH 8.8 DOWNGRADE Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via
- CVE-2022-24252 HIGH 8.8 DOWNGRADE An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allo
- CVE-2022-24251 HIGH 8.8 DOWNGRADE Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via
- CVE-2023-23685 MEDIUM 6.5 UPGRADE Auth
- CVE-2018-18087 MEDIUM 5.4 DOWNGRADE The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage portfolio" privileg
- CVE-2014-125109 LOW 3.5 UPGRADE A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.27
- CVE-2012-10017 MEDIUM 4.3 UPGRADE A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress
FAQ
How do I fix portfolio vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is portfolio being exploited right now?
None of the tracked portfolio CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which portfolio CVE should I patch first?
CVE-2022-24254 currently ranks highest (57/100): An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 a.