purchase order management vulnerabilities and fixes

Recent CVEs affecting purchase order management, with upgrade or downgrade steps. 3 tracked.

Also searched as: purchaseordermanagement.

purchase order management has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-04-14. Highest priority: CVE-2023-29622 (score 63/100).

• CVE-2023-29623 MEDIUM 6.1 DOWNGRADE Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability
• CVE-2023-29622 CRITICAL 9.8 DOWNGRADE Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parame
• CVE-2023-29621 HIGH 8.8 DOWNGRADE Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows a

FAQ

How do I fix purchase order management vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is purchase order management being exploited right now?

None of the tracked purchase order management CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which purchase order management CVE should I patch first?

CVE-2023-29622 currently ranks highest (63/100): Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parame.

RSS feed for purchase order management · ← Back to latest CVEs