PatchTheCVEcritical path vulnerabilities
Recent CVEs affecting critical path products. 4 tracked.
critical path has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2002-08-12. Highest priority: CVE-2002-0787 (score 53/100).
- CVE-2002-0787 HIGH 7.5 DOWNGRADE Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Serv
- CVE-2002-0786 MEDIUM 5.0 DOWNGRADE iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin admin
- CVE-2001-1315 HIGH 7.5 DOWNGRADE DOWNGRADE Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denia
- CVE-2001-1314 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer overflows in Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attack
FAQ
How do I fix critical path vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is critical path being exploited right now?
None of the tracked critical path CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which critical path CVE should I patch first?
CVE-2002-0787 currently ranks highest (53/100): Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Serv.