PatchTheCVEvisioweb vulnerabilities and fixes
Recent CVEs affecting visioweb, with upgrade or downgrade steps. 1 tracked.
visioweb has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-02-20. Highest priority: CVE-2022-3901 (score 39/100).
- CVE-2022-3901 HIGH 7.2 DOWNGRADE Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system.
FAQ
How do I fix visioweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is visioweb being exploited right now?
None of the tracked visioweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which visioweb CVE should I patch first?
CVE-2022-3901 currently ranks highest (39/100): Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system..