unified security management vulnerabilities and fixes

Recent CVEs affecting unified security management, with upgrade or downgrade steps. 6 tracked.

Also searched as: unifiedsecuritymanagement.

unified security management has 6 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 6. Most recent: 2018-03-14. Highest priority: CVE-2017-6972 (score 68/100).

• CVE-2018-7279 CRITICAL 9.8 UPGRADE UPGRADE A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
• CVE-2017-6972 CRITICAL 9.8 UPGRADE UPGRADE AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessa
• CVE-2017-6971 HIGH 8.8 UPGRADE UPGRADE AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbit
• CVE-2017-6970 HIGH 8.4 UPGRADE UPGRADE AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands i
• CVE-2017-14956 MEDIUM 5.7 UPGRADE AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports
• CVE-2016-7955 CRITICAL 9.8 UPGRADE UPGRADE The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and US

FAQ

How do I fix unified security management vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is unified security management being exploited right now?

None of the tracked unified security management CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which unified security management CVE should I patch first?

CVE-2017-6972 currently ranks highest (68/100): AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessa.

RSS feed for unified security management · ← Back to latest CVEs