PatchTheCVEslims akasia vulnerabilities and fixes
Recent CVEs affecting slims akasia, with upgrade or downgrade steps. 5 tracked.
Also searched as: slimsakasia.
slims akasia has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-06-22. Highest priority: CVE-2018-12659 (score 50/100).
- CVE-2018-12659 HIGH 8.8 DOWNGRADE SLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain admin access b
- CVE-2018-12657 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) exists in the Master File module in SLiMS 8 Akasia 8.3.1 via an admin/mod
- CVE-2018-12656 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) exists in the Membership module in SLiMS 8 Akasia 8.3.1 via an admin/modu
- CVE-2018-12655 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) exists in the Circulation module in SLiMS 8 Akasia 8.3.1 via an admin/mod
- CVE-2018-12654 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) exists in the Bibliography module in SLiMS 8 Akasia 8.3.1 via an admin/mo
FAQ
How do I fix slims akasia vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is slims akasia being exploited right now?
None of the tracked slims akasia CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which slims akasia CVE should I patch first?
CVE-2018-12659 currently ranks highest (50/100): SLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain admin access b.