PatchTheCVEcybelesoft vulnerabilities
Recent CVEs affecting cybelesoft products. 5 tracked.
cybelesoft has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-11-13. Highest priority: CVE-2024-40404 (score 49/100).
- CVE-2024-40410 MEDIUM 4.8 UPGRADE Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key
- CVE-2024-40408 HIGH 7.3 UPGRADE Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in th
- CVE-2024-40407 HIGH 7.5 UPGRADE A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain th
- CVE-2024-40405 HIGH 8.1 UPGRADE Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain ac
- CVE-2024-40404 CRITICAL 9.8 UPGRADE Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in th
FAQ
How do I fix cybelesoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cybelesoft being exploited right now?
None of the tracked cybelesoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cybelesoft CVE should I patch first?
CVE-2024-40404 currently ranks highest (49/100): Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in th.