PatchTheCVEscalefusion vulnerabilities and fixes
Recent CVEs affecting scalefusion, with upgrade or downgrade steps. 5 tracked.
scalefusion has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-01-11. Highest priority: CVE-2023-51749 (score 42/100).
- CVE-2023-51751 MEDIUM 6.8 DOWNGRADE ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used
- CVE-2023-51750 MEDIUM 4.6 DOWNGRADE ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads can occur
- CVE-2023-51749 HIGH 8.8 DOWNGRADE ScaleFusion 10.5.2 does not properly limit users to the Edge application because a search can be made from a t
- CVE-2023-51748 HIGH 8.8 DOWNGRADE ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used
- CVE-2023-50159 HIGH 8.8 DOWNGRADE In ScaleFusion (Windows Desktop App) agent 10.5.2, Kiosk mode application restrictions can be bypassed allowin
FAQ
How do I fix scalefusion vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is scalefusion being exploited right now?
None of the tracked scalefusion CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which scalefusion CVE should I patch first?
CVE-2023-51749 currently ranks highest (42/100): ScaleFusion 10.5.2 does not properly limit users to the Edge application because a search can be made from a t.