PatchTheCVEuser manager vulnerabilities and fixes
Recent CVEs affecting user manager, with upgrade or downgrade steps. 4 tracked.
Also searched as: usermanager.
user manager has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2006-12-15. Highest priority: CVE-2006-6594 (score 49/100).
- CVE-2006-6595 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to ex
- CVE-2006-6594 HIGH 7.5 DOWNGRADE SQL injection vulnerability in utilities/usermessages.asp in ScriptMate User Manager 2.0 allows remote attacke
- CVE-2006-6583 HIGH 7.5 UPGRADE ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified
- CVE-2006-6582 MEDIUM 6.8 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote at
FAQ
How do I fix user manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is user manager being exploited right now?
None of the tracked user manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which user manager CVE should I patch first?
CVE-2006-6594 currently ranks highest (49/100): SQL injection vulnerability in utilities/usermessages.asp in ScriptMate User Manager 2.0 allows remote attacke.