web port vulnerabilities and fixes

Recent CVEs affecting web port, with upgrade or downgrade steps. 6 tracked.

Also searched as: webport.

web port has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-06-24. Highest priority: CVE-2019-12461 (score 50/100).

• CVE-2020-23659 MEDIUM 5.4 DOWNGRADE WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.
• CVE-2020-18668 MEDIUM 5.4 UPGRADE Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcall
• CVE-2020-18665 MEDIUM 5.3 UPGRADE Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.
• CVE-2020-18664 MEDIUM 5.4 UPGRADE Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.
• CVE-2019-12461 MEDIUM 6.1 DOWNGRADE Web Port 1.19.1 allows XSS via the /log type parameter.
• CVE-2019-12460 MEDIUM 6.1 DOWNGRADE Web Port 1.19.1 allows XSS via the /access/setup type parameter.

FAQ

How do I fix web port vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is web port being exploited right now?

None of the tracked web port CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which web port CVE should I patch first?

CVE-2019-12461 currently ranks highest (50/100): Web Port 1.19.1 allows XSS via the /log type parameter..

RSS feed for web port · ← Back to latest CVEs