PatchTheCVEresearch artisan lite vulnerabilities and fixes
Recent CVEs affecting research artisan lite, with upgrade or downgrade steps. 2 tracked.
Also searched as: researchartisanlite.
research artisan lite has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2015-07-26. Highest priority: CVE-2015-2975 (score 35/100).
- CVE-2015-2976 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Research Artisan Lite before 1.18 allow remote attacker
- CVE-2015-2975 MEDIUM 5.0 UPGRADE Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers
FAQ
How do I fix research artisan lite vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is research artisan lite being exploited right now?
None of the tracked research artisan lite CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which research artisan lite CVE should I patch first?
CVE-2015-2975 currently ranks highest (35/100): Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers.