PatchTheCVEasp4cms vulnerabilities
Recent CVEs affecting asp4cms products. 1 tracked.
asp4cms has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-09-22. Highest priority: CVE-2017-14653 (score 44/100).
- CVE-2017-14653 MEDIUM 6.5 DOWNGRADE member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order informa
FAQ
How do I fix asp4cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is asp4cms being exploited right now?
None of the tracked asp4cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which asp4cms CVE should I patch first?
CVE-2017-14653 currently ranks highest (44/100): member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order informa.