PatchTheCVEdaybydaycrm vulnerabilities
Recent CVEs affecting daybydaycrm products. 11 tracked.
daybydaycrm has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2022-01-13. Highest priority: CVE-2022-22113 (score 52/100).
- CVE-2022-22113 HIGH 8.8 UPGRADE In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration
- CVE-2022-22112 MEDIUM 5.4 UPGRADE In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Inje
- CVE-2022-22111 HIGH 8.8 DOWNGRADE In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization
- CVE-2022-22110 HIGH 7.5 UPGRADE In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionalit
- CVE-2022-22109 MEDIUM 5.4 DOWNGRADE In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows lo
- CVE-2022-22108 MEDIUM 4.3 UPGRADE In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization
- CVE-2022-22107 MEDIUM 4.3 UPGRADE In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization
- CVE-2020-35707 MEDIUM 5.4 DOWNGRADE Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.
- CVE-2020-35706 MEDIUM 5.4 DOWNGRADE Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen.
- CVE-2020-35705 MEDIUM 5.4 DOWNGRADE Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen.
- CVE-2020-35704 MEDIUM 5.4 DOWNGRADE Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen.
FAQ
How do I fix daybydaycrm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is daybydaycrm being exploited right now?
None of the tracked daybydaycrm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which daybydaycrm CVE should I patch first?
CVE-2022-22113 currently ranks highest (52/100): In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration.