PatchTheCVExpede vulnerabilities and fixes
Recent CVEs affecting xpede, with upgrade or downgrade steps. 8 tracked.
xpede has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2002-08-12. Highest priority: CVE-2002-0581 (score 45/100).
- CVE-2002-0584 MEDIUM 5.0 DOWNGRADE WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to th
- CVE-2002-0583 MEDIUM 5.0 DOWNGRADE WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim r
- CVE-2002-0582 MEDIUM 5.0 DOWNGRADE WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp
- CVE-2002-0581 HIGH 7.5 DOWNGRADE WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal cr
- CVE-2002-0580 HIGH 7.5 DOWNGRADE WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp
- CVE-2002-0579 HIGH 7.5 DOWNGRADE WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP
- CVE-2002-0487 MEDIUM 4.6 DOWNGRADE Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capabil
- CVE-2002-0486 HIGH 7.2 DOWNGRADE Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow lo
FAQ
How do I fix xpede vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xpede being exploited right now?
None of the tracked xpede CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xpede CVE should I patch first?
CVE-2002-0581 currently ranks highest (45/100): WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal cr.