tradepro vulnerabilities and fixes

Recent CVEs affecting tradepro, with upgrade or downgrade steps. 3 tracked.

tradepro has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-04-04. Highest priority: CVE-2023-36645 (score 57/100).

• CVE-2023-36645 CRITICAL 9.1 DOWNGRADE SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordersh
• CVE-2023-36644 HIGH 7.5 DOWNGRADE Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations
• CVE-2023-36643 HIGH 7.5 DOWNGRADE Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the onl

FAQ

How do I fix tradepro vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tradepro being exploited right now?

None of the tracked tradepro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which tradepro CVE should I patch first?

CVE-2023-36645 currently ranks highest (57/100): SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordersh.

RSS feed for tradepro · ← Back to latest CVEs