PatchTheCVEwms vulnerabilities and fixes
Recent CVEs affecting wms, with upgrade or downgrade steps. 2 tracked.
wms has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-02-17. Highest priority: CVE-2021-33949 (score 60/100).
- CVE-2022-47635 CRITICAL 9.8 UPGRADE Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-sid
- CVE-2021-33949 CRITICAL 9.8 DOWNGRADE An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exe
FAQ
How do I fix wms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wms being exploited right now?
None of the tracked wms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wms CVE should I patch first?
CVE-2021-33949 currently ranks highest (60/100): An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exe.