PatchTheCVExymon vulnerabilities and fixes
Recent CVEs affecting xymon, with upgrade or downgrade steps. 9 tracked.
xymon has 9 tracked vulnerabilities, 8 critical. A fixed release or vendor patch exists for 8. Most recent: 2019-08-27. Highest priority: CVE-2019-13455 (score 69/100).
- CVE-2019-13486 CRITICAL 9.8 UPGRADE MITIGATE In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of &n
- CVE-2019-13485 CRITICAL 9.8 UPGRADE MITIGATE In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component vi
- CVE-2019-13484 CRITICAL 9.8 UPGRADE MITIGATE In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in
- CVE-2019-13455 CRITICAL 9.8 UPGRADE MITIGATE In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI to
- CVE-2019-13452 CRITICAL 9.8 UPGRADE MITIGATE In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c.
- CVE-2019-13451 CRITICAL 9.8 UPGRADE MITIGATE In Xymon through 4.3.28, a buffer overflow vulnerability exists in history.c.
- CVE-2019-13274 MEDIUM 6.1 UPGRADE MITIGATE In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering o
- CVE-2019-13273 CRITICAL 9.8 UPGRADE MITIGATE In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script
- CVE-2015-1430 CRITICAL 9.8 DOWNGRADE Buffer overflow in xymon 4.3.17-1.
FAQ
How do I fix xymon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xymon being exploited right now?
None of the tracked xymon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xymon CVE should I patch first?
CVE-2019-13455 currently ranks highest (69/100): In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI to.