PatchTheCVEdedebiz vulnerabilities
Recent CVEs affecting dedebiz products. 14 tracked.
dedebiz has 14 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-12-14. Highest priority: CVE-2024-52770 (score 59/100).
- CVE-2025-12859 MEDIUM 4.7 UPGRADE A vulnerability has been found in DedeBIZ up to 6.3.2
- CVE-2025-12860 MEDIUM 4.7 UPGRADE A vulnerability was found in DedeBIZ up to 6.3.2
- CVE-2025-12861 MEDIUM 4.7 UPGRADE A vulnerability was determined in DedeBIZ up to 6.3.2
- CVE-2025-12927 MEDIUM 4.7 UPGRADE A security vulnerability has been detected in DedeBIZ up to 6.3.2
- CVE-2025-14648 MEDIUM 4.7 UPGRADE A security vulnerability has been detected in DedeBIZ up to 6.5.9
- CVE-2024-7906 MEDIUM 6.3 DOWNGRADE A vulnerability classified as critical was found in DedeBIZ 6.3.0
- CVE-2024-7905 MEDIUM 6.3 DOWNGRADE A vulnerability classified as critical has been found in DedeBIZ 6.3.0
- CVE-2024-7904 MEDIUM 6.3 DOWNGRADE A vulnerability was found in DedeBIZ 6.3.0
- CVE-2024-7903 MEDIUM 6.3 DOWNGRADE A vulnerability was found in DedeBIZ 6.3.0
- CVE-2024-52771 CRITICAL 9.1 DOWNGRADE DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/fil
- CVE-2024-52770 CRITICAL 9.8 DOWNGRADE An arbitrary file upload vulnerability in the component /admin/file_manage_control of DedeBIZ v6.3.0 allows at
- CVE-2024-52769 HIGH 7.2 DOWNGRADE An arbitrary file upload vulnerability in the component /admin/friendlink_edit of DedeBIZ v6.3.0 allows attack
- CVE-2024-44717 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts
- CVE-2024-44716 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts
FAQ
How do I fix dedebiz vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dedebiz being exploited right now?
None of the tracked dedebiz CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dedebiz CVE should I patch first?
CVE-2024-52770 currently ranks highest (59/100): An arbitrary file upload vulnerability in the component /admin/file_manage_control of DedeBIZ v6.3.0 allows at.