solismed vulnerabilities and fixes

Recent CVEs affecting solismed, with upgrade or downgrade steps. 9 tracked.

solismed has 9 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-12-12. Highest priority: CVE-2019-16246 (score 66/100).

• CVE-2019-17428 MEDIUM 5.9 DOWNGRADE An issue was discovered in Intesync Solismed 3.3sp1
• CVE-2019-16246 CRITICAL 9.8 DOWNGRADE Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931
• CVE-2019-15936 CRITICAL 9.8 DOWNGRADE Intesync Solismed 3.3sp allows Insecure File Upload.
• CVE-2019-15935 MEDIUM 6.1 DOWNGRADE Intesync Solismed 3.3sp has XSS.
• CVE-2019-15934 HIGH 8.8 DOWNGRADE Intesync Solismed 3.3sp has CSRF.
• CVE-2019-15933 CRITICAL 9.8 DOWNGRADE Intesync Solismed 3.3sp has SQL Injection.
• CVE-2019-15932 CRITICAL 9.8 DOWNGRADE Intesync Solismed 3.3sp has Incorrect Access Control.
• CVE-2019-15931 CRITICAL 9.8 DOWNGRADE Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.
• CVE-2019-15930 MEDIUM 4.3 DOWNGRADE Intesync Solismed 3.3sp allows Clickjacking.

FAQ

How do I fix solismed vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is solismed being exploited right now?

None of the tracked solismed CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which solismed CVE should I patch first?

CVE-2019-16246 currently ranks highest (66/100): Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931.

RSS feed for solismed · ← Back to latest CVEs