PatchTheCVExplatform vulnerabilities and fixes
Recent CVEs affecting xplatform, with upgrade or downgrade steps. 5 tracked.
xplatform has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2022-04-26. Highest priority: CVE-2021-26629 (score 50/100).
- CVE-2021-26629 HIGH 8.8 UPGRADE A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation
- CVE-2021-26626 HIGH 8.1 UPGRADE Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands
- CVE-2020-7866 HIGH 8.8 UPGRADE When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due t
- CVE-2020-7857 HIGH 7.5 UPGRADE A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command
- CVE-2020-7853 MEDIUM 5.5 UPGRADE An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out
FAQ
How do I fix xplatform vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xplatform being exploited right now?
None of the tracked xplatform CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xplatform CVE should I patch first?
CVE-2021-26629 currently ranks highest (50/100): A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation.