PatchTheCVErexpert vulnerabilities and fixes
Recent CVEs affecting rexpert, with upgrade or downgrade steps. 6 tracked.
rexpert has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2019-10-30. Highest priority: CVE-2019-17323 (score 50/100).
- CVE-2019-17326 MEDIUM 6.5 UPGRADE ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion by issuing a
- CVE-2019-17325 MEDIUM 6.5 UPGRADE ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the A
- CVE-2019-17324 MEDIUM 6.5 UPGRADE ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST reque
- CVE-2019-17323 HIGH 8.8 UPGRADE ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print f
- CVE-2019-17322 MEDIUM 6.5 UPGRADE ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the para
- CVE-2019-17321 MEDIUM 5.3 UPGRADE ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue
FAQ
How do I fix rexpert vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rexpert being exploited right now?
None of the tracked rexpert CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rexpert CVE should I patch first?
CVE-2019-17323 currently ranks highest (50/100): ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print f.