PatchTheCVEpublixone vulnerabilities and fixes
Recent CVEs affecting publixone, with upgrade or downgrade steps. 5 tracked.
publixone has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2020-10-27. Highest priority: CVE-2020-27183 (score 57/100).
- CVE-2020-27183 CRITICAL 9.8 UPGRADE A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attacker
- CVE-2020-27182 MEDIUM 6.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in konzept-ix publiXone before 2020.015 allow remote attac
- CVE-2020-27181 MEDIUM 6.5 UPGRADE A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows atta
- CVE-2020-27180 HIGH 7.5 UPGRADE konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID pa
- CVE-2020-27179 CRITICAL 9.8 UPGRADE konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting passwor
FAQ
How do I fix publixone vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is publixone being exploited right now?
None of the tracked publixone CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which publixone CVE should I patch first?
CVE-2020-27183 currently ranks highest (57/100): A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attacker.