PatchTheCVEdamstratechnology vulnerabilities
Recent CVEs affecting damstratechnology products. 3 tracked.
damstratechnology has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-10-02. Highest priority: CVE-2020-26525 (score 61/100).
- CVE-2020-26527 CRITICAL 9.8 DOWNGRADE An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7
- CVE-2020-26526 MEDIUM 5.3 DOWNGRADE An issue was discovered in Damstra Smart Asset 2020.7
- CVE-2020-26525 CRITICAL 9.1 DOWNGRADE Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter
FAQ
How do I fix damstratechnology vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is damstratechnology being exploited right now?
None of the tracked damstratechnology CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which damstratechnology CVE should I patch first?
CVE-2020-26525 currently ranks highest (61/100): Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter.