PatchTheCVEviews bulk operations vulnerabilities and fixes
Recent CVEs affecting views bulk operations, with upgrade or downgrade steps. 2 tracked.
Also searched as: viewsbulkoperations.
views bulk operations has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2015-08-18. Highest priority: CVE-2015-5515 (score 36/100).
- CVE-2015-5515 MEDIUM 4.9 DOWNGRADE The Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation
- CVE-2010-5277 MEDIUM 4.9 DOWNGRADE Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authe
FAQ
How do I fix views bulk operations vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is views bulk operations being exploited right now?
None of the tracked views bulk operations CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which views bulk operations CVE should I patch first?
CVE-2015-5515 currently ranks highest (36/100): The Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation .