PatchTheCVEtopease vulnerabilities and fixes
Recent CVEs affecting topease, with upgrade or downgrade steps. 11 tracked.
topease has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2021-11-30. Highest priority: CVE-2021-42544 (score 49/100).
- CVE-2021-42545 HIGH 8.1 UPGRADE An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Ver
- CVE-2021-42544 HIGH 7.5 UPGRADE Missing Rate Limiting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version
- CVE-2021-42123 HIGH 7.3 UPGRADE Unrestricted File Upload in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Vers
- CVE-2021-42122 MEDIUM 4.3 UPGRADE Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform
- CVE-2021-42121 MEDIUM 4.3 UPGRADE Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform
- CVE-2021-42120 MEDIUM 6.5 UPGRADE Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform
- CVE-2021-42119 HIGH 7.3 UPGRADE Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platfo
- CVE-2021-42118 HIGH 8.1 UPGRADE Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platfo
- CVE-2021-42117 LOW 3.5 UPGRADE Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform
- CVE-2021-42116 MEDIUM 4.3 UPGRADE Incorrect Access Control in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Vers
- CVE-2021-42115 HIGH 8.1 UPGRADE Missing HTTPOnly flag in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version
FAQ
How do I fix topease vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is topease being exploited right now?
None of the tracked topease CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which topease CVE should I patch first?
CVE-2021-42544 currently ranks highest (49/100): Missing Rate Limiting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version.