PatchTheCVEspotweb vulnerabilities and fixes
Recent CVEs affecting spotweb, with upgrade or downgrade steps. 8 tracked.
spotweb has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2022-03-28. Highest priority: CVE-2021-43725 (score 48/100).
- CVE-2021-43725 MEDIUM 6.1 UPGRADE There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which al
- CVE-2021-40973 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below al
- CVE-2021-40972 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below al
- CVE-2021-40971 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below al
- CVE-2021-40970 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below al
- CVE-2021-40969 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below al
- CVE-2021-40968 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below al
- CVE-2021-33966 MEDIUM 5.4 DOWNGRADE Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary
FAQ
How do I fix spotweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is spotweb being exploited right now?
None of the tracked spotweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which spotweb CVE should I patch first?
CVE-2021-43725 currently ranks highest (48/100): There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which al.