PatchTheCVEactiveweb vulnerabilities
Recent CVEs affecting activeweb products. 4 tracked.
activeweb has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2007-07-17. Highest priority: CVE-2007-3013 (score 49/100).
- CVE-2007-3018 MEDIUM 4.0 UPGRADE activeWeb contentserver CMS before 5.6.2964 does not limit the file-creation ability of editors who have restr
- CVE-2007-3017 MEDIUM 4.0 UPGRADE The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only filters malicious tags from arti
- CVE-2007-3014 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote at
- CVE-2007-3013 MEDIUM 6.5 UPGRADE SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with
FAQ
How do I fix activeweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is activeweb being exploited right now?
None of the tracked activeweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which activeweb CVE should I patch first?
CVE-2007-3013 currently ranks highest (49/100): SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with .