ximdex vulnerabilities and fixes

Recent CVEs affecting ximdex, with upgrade or downgrade steps. 4 tracked.

ximdex has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-06-13. Highest priority: CVE-2018-12273 (score 41/100).

• CVE-2018-12273 MEDIUM 6.1 DOWNGRADE The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.
• CVE-2018-12272 MEDIUM 6.1 DOWNGRADE xowl/request.php in Ximdex 4.0 has XSS via the content parameter.
• CVE-2018-12047 MEDIUM 6.1 DOWNGRADE xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demons
• CVE-2018-11735 MEDIUM 6.1 DOWNGRADE index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter.

FAQ

How do I fix ximdex vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ximdex being exploited right now?

None of the tracked ximdex CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ximdex CVE should I patch first?

CVE-2018-12273 currently ranks highest (41/100): The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter..

RSS feed for ximdex · ← Back to latest CVEs