xts web trader vulnerabilities and fixes

Recent CVEs affecting xts web trader, with upgrade or downgrade steps. 3 tracked.

Also searched as: xtswebtrader.

xts web trader has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-09-03. Highest priority: CVE-2024-45587 (score 40/100).

• CVE-2024-45588 HIGH 8.1 DOWNGRADE DOWNGRADE This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access con
• CVE-2024-45587 HIGH 8.8 DOWNGRADE DOWNGRADE This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access con
• CVE-2024-45586 HIGH 8.8 DOWNGRADE DOWNGRADE This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS

FAQ

How do I fix xts web trader vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is xts web trader being exploited right now?

None of the tracked xts web trader CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which xts web trader CVE should I patch first?

CVE-2024-45587 currently ranks highest (40/100): This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access con.

RSS feed for xts web trader · ← Back to latest CVEs