PatchTheCVEsiteomat vulnerabilities and fixes
Recent CVEs affecting siteomat, with upgrade or downgrade steps. 6 tracked.
siteomat has 6 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 6. Most recent: 2019-06-03. Highest priority: CVE-2017-14728 (score 63/100).
- CVE-2017-14854 CRITICAL 9.1 UPGRADE A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution
- CVE-2017-14853 HIGH 8.6 UPGRADE The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due t
- CVE-2017-14852 HIGH 8.6 UPGRADE An insecure communication was found between a user and the Orpak SiteOmat management console for all known ver
- CVE-2017-14851 CRITICAL 9.8 UPGRADE A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25
- CVE-2017-14850 MEDIUM 6.1 UPGRADE All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored
- CVE-2017-14728 CRITICAL 9.8 UPGRADE An authentication bypass was found in an unknown area of the SiteOmat source code
FAQ
How do I fix siteomat vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is siteomat being exploited right now?
None of the tracked siteomat CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which siteomat CVE should I patch first?
CVE-2017-14728 currently ranks highest (63/100): An authentication bypass was found in an unknown area of the SiteOmat source code.