PatchTheCVEwebeoc vulnerabilities and fixes
Recent CVEs affecting webeoc, with upgrade or downgrade steps. 8 tracked.
webeoc has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2005-12-05. Highest priority: CVE-2005-2286 (score 56/100).
- CVE-2005-4029 MEDIUM 5.0 UPGRADE WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login
- CVE-2005-4002 MEDIUM 4.0 UPGRADE WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to dec
- CVE-2005-2286 HIGH 10.0 UPGRADE WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileg
- CVE-2005-2285 MEDIUM 5.0 UPGRADE WebEOC before 6.0.2 stores sensitive information in locations such as URIs, web pages, and configuration files
- CVE-2005-2284 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in WebEOC before 6.0.2 allow remote attackers to modify SQL statements
- CVE-2005-2283 LOW 2.1 UPGRADE WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated
- CVE-2005-2282 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in WebEOC before 6.0.2 allow remote attackers to inject ar
- CVE-2005-2281 HIGH 7.5 UPGRADE WebEOC before 6.0.2 uses a weak encryption scheme for passwords, which makes it easier for attackers to crack
FAQ
How do I fix webeoc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webeoc being exploited right now?
None of the tracked webeoc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webeoc CVE should I patch first?
CVE-2005-2286 currently ranks highest (56/100): WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileg.