PatchTheCVEproduct data management vulnerabilities and fixes
Recent CVEs affecting product data management, with upgrade or downgrade steps. 2 tracked.
Also searched as: productdatamanagement.
product data management has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2015-01-13. Highest priority: CVE-2014-100014 (score 55/100).
- CVE-2014-100015 MEDIUM 6.4 DOWNGRADE Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers
- CVE-2014-100014 HIGH 7.5 DOWNGRADE Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote att
FAQ
How do I fix product data management vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is product data management being exploited right now?
None of the tracked product data management CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which product data management CVE should I patch first?
CVE-2014-100014 currently ranks highest (55/100): Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote att.