xts mobile trader vulnerabilities and fixes

Recent CVEs affecting xts mobile trader, with upgrade or downgrade steps. 3 tracked.

Also searched as: xtsmobiletrader.

xts mobile trader has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-09-03. Highest priority: CVE-2024-45587 (score 40/100).

• CVE-2024-45588 HIGH 8.1 DOWNGRADE DOWNGRADE This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access con
• CVE-2024-45587 HIGH 8.8 DOWNGRADE DOWNGRADE This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access con
• CVE-2024-45586 HIGH 8.8 DOWNGRADE DOWNGRADE This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS

FAQ

How do I fix xts mobile trader vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is xts mobile trader being exploited right now?

None of the tracked xts mobile trader CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which xts mobile trader CVE should I patch first?

CVE-2024-45587 currently ranks highest (40/100): This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access con.

RSS feed for xts mobile trader · ← Back to latest CVEs