PatchTheCVEtraps vulnerabilities and fixes
Recent CVEs affecting traps, with upgrade or downgrade steps. 4 tracked.
traps has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2020-04-08. Highest priority: CVE-2017-7408 (score 51/100).
- CVE-2020-1991 HIGH 7.8 UPGRADE An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user
- CVE-2019-1577 MEDIUM 6.3 UPGRADE Code injection vulnerability in Palo Alto Networks Traps 5.0.5 and earlier may allow an authenticated attacker
- CVE-2017-7408 HIGH 7.5 UPGRADE Palo Alto Networks Traps ESM Console before 3.4.4 allows attackers to cause a denial of service by leveraging
- CVE-2015-2223 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto
FAQ
How do I fix traps vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is traps being exploited right now?
None of the tracked traps CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which traps CVE should I patch first?
CVE-2017-7408 currently ranks highest (51/100): Palo Alto Networks Traps ESM Console before 3.4.4 allows attackers to cause a denial of service by leveraging .