PatchTheCVEsearchblox vulnerabilities and fixes
Recent CVEs affecting searchblox, with upgrade or downgrade steps. 5 tracked.
searchblox has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-09-06. Highest priority: CVE-2020-10131 (score 58/100).
- CVE-2020-10132 MEDIUM 6.1 UPGRADE SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration.
- CVE-2020-10131 CRITICAL 9.8 UPGRADE SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.
- CVE-2020-10130 HIGH 8.8 UPGRADE SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple
- CVE-2020-10129 HIGH 8.8 UPGRADE SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin func
- CVE-2020-10128 MEDIUM 5.4 UPGRADE SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user inp
FAQ
How do I fix searchblox vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is searchblox being exploited right now?
None of the tracked searchblox CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which searchblox CVE should I patch first?
CVE-2020-10131 currently ranks highest (58/100): SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter..