PatchTheCVEarialsoftware vulnerabilities
Recent CVEs affecting arialsoftware products. 4 tracked.
arialsoftware has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2020-01-10. Highest priority: CVE-2012-3824 (score 56/100).
- CVE-2012-3824 HIGH 7.5 UPGRADE In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authoriz
- CVE-2012-3823 HIGH 7.5 UPGRADE Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved.
- CVE-2012-3822 HIGH 7.5 UPGRADE Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remo
- CVE-2012-3821 MEDIUM 4.3 UPGRADE A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551
FAQ
How do I fix arialsoftware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is arialsoftware being exploited right now?
None of the tracked arialsoftware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which arialsoftware CVE should I patch first?
CVE-2012-3824 currently ranks highest (56/100): In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authoriz.