PatchTheCVEdeltek vulnerabilities
Recent CVEs affecting deltek products. 3 tracked.
deltek has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-05-24. Highest priority: CVE-2019-12314 (score 69/100).
- CVE-2019-12314 CRITICAL 9.8 DOWNGRADE Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH
- CVE-2018-20221 HIGH 8.8 UPGRADE Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via
- CVE-2018-18251 CRITICAL 9.8 UPGRADE Deltek Vision 7.x before 7.6 permits the execution of any attacker supplied SQL statement through a custom RPC
FAQ
How do I fix deltek vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is deltek being exploited right now?
None of the tracked deltek CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which deltek CVE should I patch first?
CVE-2019-12314 currently ranks highest (69/100): Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH.